CISA Certified Information Systems Auditor – Question2679

Which of the following is the MOST effective control for emergency changes to application programs?

A.
Processing the change through change control with review of the change the following day
B. Keeping a sealed envelope containing a password that operators can use to make emergency changes
C. Periodically checking the application program libraries to detect whether unauthorized changes have been made
D. Preparing and approving program change forms before the changes are made

Correct Answer: A