CISSP · Question #104
Which of the following are required components for implementing software configuration management systems?
The correct answer is A. Audit control and signoff. Software configuration management (SCM) systems require formal audit control and signoff to ensure changes are tracked, authorized, and accountable throughout the software lifecycle.
Question
Which of the following are required components for implementing software configuration management systems?
Options
- AAudit control and signoff
- BUser training and acceptance
- CRollback and recovery processes
- DRegression testing and evaluation
How the community answered
(51 responses)- A92% (47)
- B2% (1)
- C2% (1)
- D4% (2)
Why each option
Software configuration management (SCM) systems require formal audit control and signoff to ensure changes are tracked, authorized, and accountable throughout the software lifecycle.
Audit control and signoff are foundational SCM components defined in standards like IEEE 828, ensuring that every configuration change is formally reviewed, approved, and recorded. This provides traceability and accountability, which are core mandates of any SCM system. Without audit control, the integrity and history of configuration items cannot be verified or enforced.
User training and acceptance is a change management and project management concern, not a required structural component of a software configuration management system itself.
Rollback and recovery processes are important operational and business continuity practices but are not defined as required components within the formal SCM framework or standards.
Regression testing and evaluation is part of the software quality assurance and testing discipline, not a required component of the configuration management system itself, even though it may be triggered by configuration changes.
Concept tested: Required components of software configuration management systems
Source: https://standards.ieee.org/ieee/828/6242/
Topics
Community Discussion
No community discussion yet for this question.