Study. uk . com
  1. Home
  2. All questions
  3. Question 564

CISM study material · question 564 of 1000

Why does NIST require changes to be tested before implementation?

  1. So the change can be costed accurately before the change board is asked to approve the work and then release the funding for it
  2. So the vendor's warranty on each affected product remains valid once the change has been applied in production
  3. So the change board has documented test evidence to attach to the minutes recording its own approval decision
  4. So the effects of the change can be observed, minimising the risk of adverse results in production
Show the answer

Answer: D. So the effects of the change can be observed, minimising the risk of adverse results in production

SP 800-100 requires changes to be tested first so their effects are seen before production feels them, which is what keeps adverse results down.

Source: NIST SP 800-100 (NIST) — Ch. 14 Configuration Management

Challenge yourself on this topic → Study as cards