CISM Certified Information Security Manager – Question0808

Which of the following change management procedures is MOST likely to cause concern to the information security manager?

A.
Fallback processes are tested the weekend before changes are made.
B. The development manager migrates programs into production.
C. A manual rather than an automated process is used to compare program versions.
D. Users are not notified of scheduled system changes.

Correct Answer: B