CISSP – Information Systems Security Management Professional (ISSMP) — Question 52

Change Management is used to ensure that standardized methods and procedures are used for efficient handling of all changes. Who decides the category of a change?

Answer options

• A. The Problem Manager
• B. The Process Manager
• C. The Change Manager
• D. The Service Desk
• E. The Change Advisory Board

Correct answer: C

Explanation

The Change Manager is responsible for categorizing changes, ensuring they are processed according to defined standards. The Problem Manager focuses on resolving issues, the Process Manager oversees the implementation of processes, the Service Desk handles user requests, and the Change Advisory Board provides guidance but does not make the final decision on change categories.