Which of the following processes should an IS auditor recommend to assist in the recording of
baselines for software releases?

A.
Change management

B.
Backup and recovery

C.
incident management

D.
Configuration management

Explanation:
The configuration management process may include automated tools that will provide an
automated recording of software release baselines. Should the new release fail, the baseline will
provide a point to which to return. The other choices do not provide the processes necessary for
establishing software release baselines and are not related to software release baselines.