CISA Certified Information Systems Auditor – Question0732

Code changes are compiled and placed in a change folder by the developer. An implementation team migrates changes to production from the change folder. Which of the following BEST indicates separation of duties is in place during the migration process?

A.
A second individual performs code review before the change is released to production.
B. The developer approves changes prior to moving them to the change folder.
C. The implementation team does not have experience writing code.
D. The implementation team does not have access to change the source code.

Correct Answer: A