Program change controls must ensure that all changes are

A.
Audited to verify intent.

B.
Tested to ensure correctness.

C.
Implemented into production systems.

D.
Within established performance criteria.

Explanation:
Document of the change. Once the change is approved, it should be entered into a change log and
the log should be updated as the process continues toward completion. Tested and presented. The
change must be fully tested to uncover any unforeseen results. Depending on the severity of the
change and the company’s organization, the change and implementation may need to be presented
to a change control committee. This helps show different sides to the purpose and outcome of the
change and the possible ramifications. – Shon Harris All-in-one CISSP Certification Guide pg 815