CompTIA Security+ (SY0-701) — Question 255

During an annual review of the system design, an engineer identified a few issues with the currently released design. Which of the following should be performed next according to best practices?

Answer options

• A. Risk management process
• B. Product design process
• C. Design review process
• D. Change control process

Correct answer: D

Explanation

The correct answer is D, as the Change control process is essential to manage modifications based on identified issues. Options A, B, and C are important processes, but they do not directly address the immediate need for implementing changes to rectify the identified design flaws.