CGEIT Certified in the Governance of Enterprise IT – Question161

A regulatory audit of an IT department has identified discrepancies between processes described in the procedures and what is actually done by system administrators. The discrepancies were caused by recent IT application changes. Which of the following would be the BEST way to prevent the recurrence of similar findings in the future?

A.
Include the update of documentation within the change management framework.
B. Assign the responsibility for periodic revisions and changes to process owners.
C. Require each IT employee to confirm compliance with IT procedures on an annual basis.
D. Establish high-level procedures to minimize process changes.

Correct Answer: B