Which of the following should be of GREATEST concern to the organizations information security manager?

An emergency change was made to an IT system as a result of a failure.

Which of the following should be of GREATEST concern to the organizations information security manager?
A . The change did not include a proper assessment of risk.
B . Documentation of the change was made after implementation.
C . The operations team implemented the change without regression testing,
D . The information security manager did not review the change prior to implementation.

View Answer

Answer: A