nerdexam
(ISC)2

CISSP · Question #748

Who must approve modifications to an organization's production infrastructure configuration?

The correct answer is B. Change control board. A change control board (CCB) is a group of stakeholders who are responsible for reviewing, approving, and monitoring changes to an organization's production infrastructure configuration. A production infrastructure configuration is the set of hardware, software, network, and envi

Submitted by mike_84· Mar 5, 2026Security Operations

Question

Who must approve modifications to an organization's production infrastructure configuration?

Options

  • ATechnical management
  • BChange control board
  • CSystem operations
  • DSystem users

How the community answered

(30 responses)
  • A
    7% (2)
  • B
    90% (27)
  • C
    3% (1)

Explanation

A change control board (CCB) is a group of stakeholders who are responsible for reviewing, approving, and monitoring changes to an organization's production infrastructure configuration. A production infrastructure configuration is the set of hardware, software, network, and environmental components that support the operation of an information system. Changes to the production infrastructure configuration can affect the security, performance, availability, and functionality of the system. Therefore, changes must be carefully planned, tested, documented, and authorized before implementation. A CCB ensures that changes are aligned with the organization's objectives, policies, and standards, and that changes do not introduce any adverse effects or risks to the system or the organization. A CCB is not the same as technical management, system operations, or system users, who may be involved in the change management process, but do not have the authority to approve changes.

Topics

#Change management#IT governance#Production infrastructure

Community Discussion

No community discussion yet for this question.

Full CISSP Practice