Certified in Risk and Information Systems Control (CRISC) — Question 1396

It is MOST appropriate for changes to be promoted to production after they are:

Answer options

• A. approved by the business owner
• B. tested by business owners
• C. communicated to business management
• D. initiated by business users

Correct answer: A

Explanation

The correct answer is A because changes should be approved by the business owner to ensure they align with business goals and requirements. Options B, C, and D do not guarantee that the changes meet the necessary standards or expectations set by the business, making them less appropriate for promoting changes to production.