ISC2 ISSMP Exam - Topic 1 Question 20 Discussion

Change management is a structured approach to transitioning individuals, teams, and organizations from a current state to a desired future state.

Change Management is used to ensure that standardized methods and procedures are used for efficient handling of all changes. A change is 'an event that results in a new status of one or more configuration items (CI's)' approved by management, cost effective, enhances business

process changes (fixes) - with a minimum risk to IT infrastructure. The main aims of Change Management are as follows.

Minimal disruption of services

Reduction in back-out activities

Economic utilization of resources involved in the change

Answer option B is incorrect. Configuration Management System is a subsystem of the overall project management system. It is a collection of formal documented procedures used to identify and document the functional and physical characteristics of a product, result, service, or component of the project. It also controls any changes to such characteristics, and records and reports each change and its implementation status. It includes the documentation, tracking systems, and defined approval levels necessary for authorizing and controlling changes. Audits are performed as part of configuration management to determine if the requirements have been met.

Answer option D is incorrect. The procurement management plan defines more than just the procurement of team members, if needed. It defines how procurements will be planned and executed, and how the organization and the vendor will fulfill the terms of the contract.

Answer option A is incorrect. Risk Management is a decision-making process that involves the organization, users, and the project team. It deals with the uncertainties that might occur during the application development.