CISA Certified Information Systems Auditor – Question1151

Controls related to authorized modifications to production programs are BEST tested by:

A.
testing only the authorizations to implement the new program.
B. tracing modifications from the executable program back to the original request for change.
C. reviewing only the actual lines of source code changed in the program.
D. tracing modifications from the original request for change forward to the executable program.

Correct Answer: D