What is the primary purpose of maintaining an audit trail for change requests?

To ensure that all changes are approved by the same person

To eliminate the need for security testing

To speed up the change approval process

To provide a historical record of changes for accountability and review

Which of the following is an example of coordinating with stakeholders to address security considerations in a change?

Sending a change notification to all employees after implementation

Assigning a project manager to oversee the change implementation

Consulting the network security team about firewall rule changes before approval

Updating the change management policy after the change is completed

Why is it important to identify all relevant stakeholders for a change?

To ensure that security considerations are addressed from all relevant perspectives

To ensure that all stakeholders have the opportunity to approve the change

To reduce the number of change requests that need to be processed

To ensure that the change is implemented quickly

A multinational corporation is rolling out a new identity management system that will affect all employees globally. The change control process requires coordination with stakeholders. Which of the following is a key reason to involve the human resources (HR) department in this change?

HR can provide the budget for the new system.

HR can test the system for technical vulnerabilities.

HR can ensure that the system aligns with employee lifecycle processes such as onboarding and offboarding.

HR can approve the change without involving the change advisory board.

How does change control ensure compliance with organizational policies?

By requiring that all changes be approved by the Chief Information Security Officer

By aligning change processes with policy requirements and verifying adherence through monitoring

By ensuring that all changes are implemented as quickly as possible

By preventing any changes to systems that handle sensitive data

Information Systems Security Management Professional

Domain 2Objective 4

2.4 Manage Security Aspects of Change Control ISSMP Practice Questions (Page 3)

Part of the Systems Lifecycle Management domain, which accounts for 15% of the ISSMP exam. ISC2 does not publish an official question count, but from its 180-minute exam (~70–120 total, ~11–18 in this domain), expect 3–5 from this objective — we provide 27 practice questions to prepare you well beyond it. (estimate)

27questions here

6free pages

5concepts

15%of the exam

Questions 11–15

11foundation · easy
What is the primary purpose of maintaining an audit trail for change requests?
Select an answer first
12foundation · easy
Which of the following is an example of coordinating with stakeholders to address security considerations in a change?
Select an answer first
13foundation · easy
Why is it important to identify all relevant stakeholders for a change?
Select an answer first
14application · medium
A multinational corporation is rolling out a new identity management system that will affect all employees globally. The change control process requires coordination with stakeholders. Which of the following is a key reason to involve the human resources (HR) department in this change?
Select an answer first
15foundation · easy
How does change control ensure compliance with organizational policies?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to ISSMP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “ISSMP” is a trademark of its owner, used for identification only.