Which of the following observations of change management should be considered by the information system auditor to be the most serious risk?

 Which of the following observations of change management should be considered by the information system auditor to be the most serious risk?
A . Two weeks after the approval, the changes were deployed.
B . The change has not been approved by the business owner
C . No software tracking change management.
D . Making this change is not cost effective.

View Answer

Answer: B