Certified in Risk and Information Systems Control (CRISC) — Question 760

The MOST important reason for implementing change control procedures is to ensure:

Answer options

• A. an audit trail exists.
• B. timely evaluation of change events.
• C. that emergency changes are logged.
• D. only approved changes are implemented.

Correct answer: D

Explanation

The correct answer is D because the primary purpose of change control procedures is to ensure that only approved changes are made, minimizing risks. While options A, B, and C are important aspects of change control, they are secondary to the need for approval of changes before implementation.