An IS auditor is asked to review a large organization's change management process. Which of the following practices presents the GREATEST risk?

A. Transaction data changes can be made by a senior developer.

B. Change management tickets do not contain specific documentation.

C. A system administrator performs code migration on planned downtime.

D. Emergency code changes are promoted without user acceptance testing (UAT).








 

Suggested Answer: D

Community Answer: D



This question is in CISA Certified Information Systems Auditor Exam
For getting Certified Information Systems Auditor (CISA) Certificate










Disclaimers:
The website is not related to, affiliated with, endorsed or authorized by ISACA. 
Trademarks, certification & product names are used for reference only and belong to ISACA.
The website does not contain actual questions and answers from ISACA's Certification Exams.