Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
ISACA Certified in Risk and Information Systems Control · Isaca
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
C. Percent of unauthorized changes The percent of unauthorized changes is a critical metric for evaluating the effectiveness of a change management process. A low percentage of unauthorized changes indicates that the process is effective in controlling and managing changes within the organization. It suggests that changes are being properly reviewed, approved, and documented according to the organization's policies and procedures. This metric directly reflects the level of control and oversight the organization has over its change management processes.
A. Average time to complete changes The best metric to demonstrate the effectiveness of an organization's change management process is the "Average time to complete changes" (option A). This metric assesses how efficiently changes are implemented within the organization. A shorter average time to complete changes generally indicates that the change management process is effective at minimizing disruption and delays while still ensuring that changes are made successfully. This is a key indicator of effective change management, as it shows that the organization can adapt to new requirements or improvements quickly and without excessive downtime.
The other options have potential downsides: B. Increase in the number of emergency changes: An increase in emergency changes may indicate problems with the change management process, as more emergencies typically mean that changes are not being planned and executed as they should be. C. Percent of unauthorized changes: A high percentage of unauthorized changes is a clear sign that the change management process is not effective at preventing unauthorized or uncontrolled modifications. While this is a useful metric for highlighting problems, it does not demonstrate the process's overall effectiveness. D. Increase in the frequency of changes: An increase in the frequency of changes can be positive if it reflects the organization's ability to innovate and adapt quickly. However, it could also be a sign that the organization is making too many changes without proper planning and control, potentially leading to instability.