Organizations develop change control procedures to ensure that

A.
All changes are authorized, tested, and recorded.

B.
Changes are controlled by the Policy Control Board (PCB).

C.
All changes are requested, scheduled, and completed on time.

D.
Management is advised of changes made to systems.

Explanation:
“Change Control: Changes must be authorized, tested, and recorded. Changed systems may require
re-certification and re-accreditation.” Pg 699 Shon Harris: All-in-One CISSP Certification