Which of the following is MOST effective in preventing weaknesses from being introduced into existing production systems?

A.
Patch management

B.
Change management

C.
Security baselines

D.
Virus detection

Explanation:
Change management controls the process of introducing changes to systems. This is often the point at which a weakness will be introduced. Patch management involves the correction of software weaknesses and would necessarily follow change management procedures. Security baselines provide minimum recommended settings and do not prevent introduction of control weaknesses. Virus detection is an effective tool but primarily focuses on malicious code from external sources, and only for those applications that are online.