Program change controls must ensure that all changes are

A.
Audited to verify intent.

B.
Tested to ensure correctness.

C.
Implemented into production systems.

D.
Within established performance criteria.

Explanation:
Document of the change. Once the change is approved, it should be entered into a
change log and the log should be updated as the process continues toward completion.
Tested and presented. The change must be fully tested to uncover any unforeseen results.
Depending on the severity of the change and the company’s organization, the change and
implementation may need to be presented to a change control committee. This helps show
different sides to the purpose and outcome of the change and the possible ramifications. – Shon
Harris All-in-one CISSP Certification Guide pg 815