Certified Internal Auditor (CIA) Part 3: Business Knowledge for Internal Auditing — Question 227

Which of the following statements regarding program change management is not correct?

Answer options

• A. The goal of the change management process is to sustain and improve organizational operations.
• B. The degree of risk associated with a proposed change determines if the change request requires authorization.
• C. In order to protect the production environment, changes must be managed in a repeatable, defined, and predictable manner.
• D. All changes should be tested in a non-production environment before migrating to the production environment.

Correct answer: B

Explanation

Option B is incorrect because while risk assessment is important, not all proposed changes require formal authorization, especially minor ones. The other options correctly highlight the goals and practices of change management, emphasizing the importance of maintaining operational integrity and testing before deployment.