Which of the following processes should an IS auditor recommend to assist in the recording of baselines for
software releases?

A.
Change management

B.
Backup and recovery

C.
incident management

D.
Configuration management

Explanation:
The configuration management process may include automated tools that will provide an automated recording
of software release baselines. Should the new release fail, the baseline will provide a point to which to return.
The other choices do not provide the processes necessary for establishing software release baselines and are
not related to software release baselines.