Certified in the Governance of Enterprise IT (CGEIT) — Question 104

Which of the following is the BEST way to address an IT audit finding that many enterprise application updates lack appropriate documentation?

Answer options

• A. Add change control to the risk register.
• B. Conduct software quality audits.
• C. Enforce change control procedures.
• D. Review the application development life cycle.

Correct answer: C

Explanation

The correct answer is C because enforcing change control procedures ensures that all updates are properly documented moving forward. Options A and D do not directly address the documentation issue, while B focuses on quality assessments rather than improving documentation practices.