There are often scenarios where the IT staff must react to emergencies and quickly apply fixes or change configurations. When dealing with such emergencies, which of the following is the best approach to making changes?

A.
Review the changes within 48 hours of making them.

B.
Review and document the emergency changes after the incident is over.

C.
Activity should not take place in this manner.

D.
Formally submit the change to a change control committee and follow the complete change control process.

Explanation:
B: After the incident or emergency is over, the staff should review the changes to ensure that they are correct and do not open security holes or affect
interoperability. The changes need to be properly documented and the system owner needs to be informed of changes.
+ A is incorrect because it is not the best answer. The changes should be reviewed after the incident is over, but not necessarily within 48 hours. Many times the
changes should be reviewed hours after they are implementednot days.
+ C is incorrect because, while it would be nice if emergencies didn’t happen, they are unavoidable. At one point or another, for example, an IT administrator will
have to roll out a patch or change configurations to protect systems against a high-profile vulnerability.
+ D is incorrect because if an emergency is taking place, then there is no time to go through the process of submitting a change to the change control committee
and following the complete change control process. These steps usually apply to large changes that take place to a network or environment. These types of
changes are typically expensive and can have lasting effects on a company.