Certified Information Systems Auditor (CISA) — Question 1073

An IS auditor is reviewing historical production change tickets. Which of the following is the BEST indication of potential concerns with the change management process?

Answer options

• A. A large number of canceled changes
• B. A large number of emergency changes
• C. A large number of rollback changes
• D. A large number of high-impact changes

Correct answer: C

Explanation

A large number of rollback changes indicates that previous changes were not successful and needed to be reverted, suggesting weaknesses in planning or execution. In contrast, while canceled, emergency, and high-impact changes can also raise concerns, they do not directly reflect the effectiveness of the implemented changes as rollbacks do.