Certified Information Systems Auditor (CISA) — Question 1217

Emergency change control procedures MUST include which of the following requirements?

Answer options

• A. Request that the help desk make the changes.
• B. Ensure audit logs track emergency changes.
• C. Use an emergency ID to move production programs into development.
• D. Update production source libraries to reflect changes.

Correct answer: B

Explanation

The correct answer is B because maintaining audit logs is essential for tracking changes made during emergencies, ensuring accountability and compliance. The other options do not align with standard emergency change control practices, as they either involve inappropriate procedures or do not focus on the necessary documentation and tracking.