CISA Certified Information Systems Auditor – Question0972

Which of the following testing approaches provides the GREATEST assurance that only approved systems development releases have been implemented in the production environment?

A.
Test whether a sample of approved developments have releases in production migration logs.
B. Test whether a sample of developments in the systems development register have documented approvals.
C. Test whether a sample of releases in production migration logs have corresponding approvals.
D. Test whether a sample of releases followed the organization's segregation of duties access.

Correct Answer: C