Certified in Risk and Information Systems Control (CRISC) — Question 94

The BEST control to mitigate the risk associated with project scope creep is to:

Answer options

• A. consult with senior management on a regular basis
• B. apply change management procedures
• C. ensure extensive user involvement
• D. deploy CASE tools in software development

Correct answer: B

Explanation

Implementing change management procedures is crucial as it allows for a structured approach to handle modifications, ensuring that all changes are assessed and approved before being implemented. The other options, while helpful in their own right, do not directly address the control of scope changes as effectively as a formal change management process.