Home MCQs CISA Question #6826
Back to Questions
CISA QUESTION #6826
Question 1
An auditor reviews change control logs and finds that 40% of emergency changes lack proper post-implementation documentation. What is the PRIMARY risk?
  • Delayed documentation
  • Inability to support rollback and verify that emergency procedures were followed appropriately✔️
  • Increased administrative burden
  • Reduced change velocity
Correct Answer Explanation
Emergency changes still require documentation, though approval may be retroactive. Without post-implementation documentation, there is no evidence that changes were appropriate, no support for rollback if needed, and no way to verify that emergency procedures were followed correctly or that changes achieved intended results.