CISA Practice Question: Information Systems Acquisition, Development, and Implementation

During a change management audit, which TWO of the following are essential elements of a normal change request? (Select two.)

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

✓

Justification for the change

A change request should include justification and an impact analysis to assess risks and benefits before approval.

Answer analysis

For each option: why learners choose it and why it is or isn't the right answer here.

✗
The name of the developer who will implement the change
Why it's wrong here
The implementer's name is operational detail, not essential for approval.
✓
Justification for the change
Why this is correct
Justification explains why the change is needed.
✗
The project manager's approval
Why it's wrong here
Approval is a step, not an element of the request itself.
✓
Impact analysis
Why this is correct
Impact analysis assesses the effect on systems and processes.
✗
A list of all users affected
Why it's wrong here
While useful, it is not as fundamental as justification and impact analysis.

Go deeper