QuestionQ63
Security Program Management and OversightDuring an audit of an organization, auditors determine that developers can promote code to production. The auditors ask for a complete review of every production change. What should the organization implement to avoid requiring a full review in the future?
- A Branch protection
- B Centralized code repositories
- C Interactive application security testing
- D Change control board
Community Discussion