CISA Practice Question: Information Systems Operations and Business Resilience
During a change advisory board (CAB) meeting, a proposed change to the database server is discussed. The change involves implementing a security patch that requires a reboot. The change is categorized as 'normal' and has been risk-assessed as low impact. What is the most likely role of the CAB in this scenario?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Review and approve the change
The CAB reviews and approves changes based on risk and impact. For a low-risk normal change, the CAB typically authorizes the change, possibly with standard procedures.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Review and approve the change
Why this is correct
The CAB is responsible for reviewing and approving changes, especially those categorized as normal.
- ✗
Implement the change directly
Why it's wrong here
Implementation is done by the change management team, not the CAB.
- ✗
Reject the change as unnecessary
Why it's wrong here
Rejection is rare for security patches; the CAB usually approves when risk is low.
- ✗
Defer the change to the next release cycle
Why it's wrong here
Deferring may not be necessary for a low-risk change.
Go deeper
Related to this question
About these practice questions
This CISA question is part of Courseiva's 995-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CISA practice question is part of Courseiva's free ISACA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CISA exam.