Certified Information Systems Auditor (CISA) — Question 963

Which of the following BEST ensures that effective change management is in place in an IS environment?

Answer options

• A. Adequate testing was carried out by the development team.
• B. User-prepared detailed test criteria for acceptance testing of the software.
• C. User authorization procedures for application access are well established.
• D. Access to production source and object programs is well controlled.

Correct answer: D

Explanation

Option D is correct because controlling access to production source and object programs is crucial for maintaining the integrity of the system during changes. The other options, while important, do not directly relate to the overarching strategy of change management as effectively as option D does.