Exam CISA Topic 4 Question 1305 Discussion

Actual exam question for ISACA's CISA exam
Question #: 1305
Topic #: 4
Which of the following BEST indicates to an IS auditor that an organization handles emergency changes appropriately and transparently?

Suggested Answer: B Vote an answer

by shery.aj89 at Aug 14, 2025, 02:43 AM

Limited Time Offer

15%

Off

Get Premium CISA Questions as Interactive Self Test Engine or PDF

Comments

Chosen Answer:
This is a voting comment (?) , you can switch to a simple comment.
Switch to a voting comment New
Nick name: Submit Cancel
shery.aj89
2025-08-14 02:43:36
Selected Answer: D
In emergencies, normal change management steps (like full approvals and testing) may be bypassed to restore service quickly.

Applying change management controls retroactively means that after the emergency fix, the organization still documents, tests, and gets the change approved — ensuring transparency and accountability.

A (permanent production access) is a control weakness.

B (procedures in manual) is preventive in nature but doesn’t prove that emergency changes are actually handled appropriately.

C (immediate application) is expected in emergencies but doesn’t ensure proper tracking or review afterward.
upvoted 1 times
...
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
0
0
0
10