Isaca Certified Information Systems Auditor CISA Question # 444 Topic 45 Discussion
CISA Exam Topic 45 Question 444 Discussion:
Question #: 444
Topic #: 45
A configuration management audit identified that predefined automated procedures are used when deploying and configuring application infrastructure in a cloud-based
environment. Which of the following is MOST important for the IS auditor to review?
A.
Storage location of configuration management documentation
B.
Processes for making changes to cloud environment specifications
C.
Contracts of vendors responsible for maintaining provisioning tools
D.
Number of administrators with access to cloud management consoles
The IS auditor should review the processes for making changes to cloud environment specifications, as these are the inputs for the predefined automated procedures that deploy and configure the application infrastructure. The IS auditor should verify that the changes are authorized, documented, tested, and approved before they are applied to the cloud environment. The IS auditor should also check that the changes are aligned with the business requirements and do not introduce any security or performance issues.
References
ISACA CISA Review Manual, 27th Edition, page 254
Configuration Management in Cloud Computing - ScienceDirect
Cloud Configuration Management - BMC Software
Contribute your Thoughts:
Chosen Answer:
This is a voting comment (?). You can switch to a simple comment. It is better to Upvote an existing comment if you don't have anything to add.
Submit