Certified Information Systems Security Professional (CISSP) — Question 394

Which of the following is included in change management?

Answer options

• A. Technical review by business owner
• B. User Acceptance Testing (UAT) before implementation
• C. Cost-benefit analysis (CBA) after implementation
• D. Business continuity testing

Correct answer: B

Explanation

User Acceptance Testing (UAT) is a critical component of change management as it ensures that the changes meet user requirements before they are deployed. While technical reviews, cost-benefit analyses, and business continuity testing are important processes, they do not specifically fall under the change management umbrella as UAT does.