Certified in Risk and Information Systems Control (CRISC) — Question 863

Which of the following is the BEST control to minimize the risk associated with scope creep in software development?

Answer options

• A. An established process for project change management
• B. Business management's review of functional requirements
• C. Segregation between development, test, and production
• D. Retention of test data and results for review purposes

Correct answer: A

Explanation

The correct answer is A, as having a structured procedure for managing project changes helps to formally evaluate and control changes to the project scope, thereby minimizing scope creep. Options B and C, while important, do not directly address the management of project scope changes. Option D relates to testing processes but does not help in controlling scope creep.