Certified in Risk and Information Systems Control (CRISC) — Question 117

Which of the following conditions presents the GREATEST risk to an application?

Answer options

• A. Application development is outsourced.
• B. Developers have access to production environment.
• C. Source code is escrowed.
• D. Application controls are manual.

Correct answer: B

Explanation

The correct answer is B because allowing developers access to the production environment can lead to unauthorized changes, data breaches, or system downtime. Options A, C, and D present risks, but they do not have the same immediate and critical impact on the application's integrity and security as access to the production environment does.