Back to Questions
CISA
QUESTION #6826
Question 1
An auditor reviews change control logs and finds that 40% of emergency changes lack proper post-implementation documentation. What is the PRIMARY risk?
Correct Answer Explanation
Emergency changes still require documentation, though approval may be retroactive. Without post-implementation documentation, there is no evidence that changes were appropriate, no support for rollback if needed, and no way to verify that emergency procedures were followed correctly or that changes achieved intended results.
Sign in to join the conversation and share your thoughts.
Log In to Comment