Which element of IT general controls focuses on changes to systems and software?

Which element of IT general controls focuses on changes to systems and software?

• A. Access controls
• B. IT operations
• C. Data integrity
• D. Change management

Answer: (D)

Change management is the process that governs changes to systems and software. It enforces a formal lifecycle: request, risk assessment, approval, development and testing in a controlled environment, deployment, documentation, and back-out procedures. This focus ensures modifications are authorized, tested, and traceable, reducing the risk of introducing errors or security gaps. Access controls handle who can use resources; IT operations cover day-to-day tasks; data integrity concentrates on data accuracy. Because change management directly addresses how and when systems and software are altered, it best fits this requirement.

Change management is the process that governs changes to systems and software. It enforces a formal lifecycle: request, risk assessment, approval, development and testing in a controlled environment, deployment, documentation, and back-out procedures. This focus ensures modifications are authorized, tested, and traceable, reducing the risk of introducing errors or security gaps. Access controls handle who can use resources; IT operations cover day-to-day tasks; data integrity concentrates on data accuracy. Because change management directly addresses how and when systems and software are altered, it best fits this requirement.