What oversight should the information security team have in the change management process for application security?

A. Information security should be aware of any significant application security changes and work with developer to test for vulnerabilities before changes are deployed in production

B. Information security should be aware of all application changes and work with developers before changes and deployed in production

C. Information security should be informed of changes to applications only

D. Development team should tell the information security team about any application security flaws








 

Suggested Answer: A






This question is in 712-50 EC-Council Certified CISO (CCISO) Exam
For getting EC-Council Certified CISO (CCISO) Certificate




Disclaimers:
The website is not related to, affiliated with, endorsed or authorized by EC-Council.
Trademarks, certification & product names are used for reference only and belong to EC-Council.
The website does not contain actual questions and answers from EC-Council's Certification Exam.