Câu 243: CISA: Certified Information Systems Auditor
An IS auditor notes that an organization's DevOps team has both production and developer access. The head of IT operations agrees that there is a segregation of duties concern but considers both types of access to be necessary for the team. Which of the following is the auditor's BEST recommendation?
Nội dung câu hỏi
An IS auditor notes that an organization's DevOps team has both production and developer access. The head of IT operations agrees that there is a segregation of duties concern but considers both types of access to be necessary for the team. Which of the following is the auditor's BEST recommendation?
Các lựa chọn
Đáp án được giữ gọn theo nhãn A, B, C, D trong phần bình chọn tương tác.
- A. Implement weekly management reviews to confirm that no change was both developed and deployed by the same engineer.
- B. Require DevOps engineers’ access to production systems to be reauthorized quarterly by the head of IT operations.
- C. Have developer access removed from the DevOps engineers.
- D. Implement an automated control to prevent deployment if the developer is also trying to deploy the change. — đáp án hiện tại
Cộng đồng
0 bình luận công khai. Tên thành viên được ẩn một phần.
Chưa có bình luận. Mở giao diện tương tác để bắt đầu thảo luận.