CISA Certified Information Systems Auditor – Question2033

Which of the following methods would be MOST effective in verifying that all changes have been authorized?

A.
Reconciling problem tickets with authorized change control entries
B. Reconciling reports of changes in production libraries to authorized change log entries
C. Validating authorized change log entries with individual(s) who promoted into production
D. Reconciling reports of changes in development libraries to supporting documentation

Correct Answer: C