Certified Information Systems Security Professional – CISSP – Question166

What is the MAIN purpose of a change management policy?

A.
To assure management that changes to the Information Technology (IT) infrastructure are necessary
B. To identify the changes that may be made to the Information Technology (IT) infrastructure
C. To verify that changes to the Information Technology (IT) infrastructure are approved
D. To determine the necessary for implementing modifications to the Information Technology (IT) infrastructure

Correct Answer: C