Home › MCQs › CISA › Question #6842
Back to Questions
CISA QUESTION #6842
Question 1
During a review of change management, an auditor discovers that programmers have access to modify code in both development and production environments. What is the PRIMARY control weakness?
  • Inefficient workflow
  • Lack of separation between development and production violates change control principles✔️
  • Excessive permissions
  • Need for additional training
Correct Answer Explanation
Separation of development and production environments is fundamental to change control. Programmers should develop in isolated environments with controlled migration to production. Direct production access by developers allows unauthorized changes to bypass testing, approval, and change control processes.