Study. uk . com
  1. Home
  2. All questions
  3. Question 585

CISM study material · question 585 of 1000

Which staffing arrangement does NIST recommend for moving an approved change into production, and why?

  1. The same personnel who developed the change, since they understand it best and can correct any problem that it causes in production the fastest
  2. The change requester, so that the person who asked for the change can confirm that it actually meets the need before it is allowed to go live
  3. Different personnel from those who developed the change, giving greater assurance that unapproved changes do not reach production
  4. An external contractor, so that independence from both the development team and from the operations team is preserved right through the whole of the release cycle
Show the answer

Answer: C. Different personnel from those who developed the change, giving greater assurance that unapproved changes do not reach production

SP 800-100 separates the people pushing a change into production from those who built it, which raises confidence that nothing unapproved slips through.

Source: NIST SP 800-100 (NIST) — Sec. 14.3 Step 4 Implement Approved Change

Challenge yourself on this topic → Study as cards