Exam CCSK topic 1 question 93 discussion

In the context of a rapidly growing start-up like "ABC" providing a cloud-based IT management solution, implementing controls for Change Control & Configuration Management is essential to manage changes effectively in their production environment. Option A outlines a specific control related to managing the risks associated with changes to critical applications, customer-impacting systems, and infrastructure components. Given that ABC is dealing with cloud-based IT management and providing services to customers, ensuring that changes are controlled and assessed for potential impacts is crucial for maintaining the stability and security of their production environment. Therefore, in this scenario, option A is the most suitable control to implement for Change Control & Configuration Management in ABC's rapidly growing cloud-based IT management start-up.

Option A is the most appropriate control in this scenario, as it specifically addresses the need to manage changes in business-critical or customer-impacting applications, system designs, and configurations in the production environment.

A. Policies and procedures shall be established for managing the risks associated with applying changes to business-critical or customer (tenant)-impacting (physical and virtual) applications and system-system interface (API) designs and configurations, infrastructure network and systems components. As a growing start-up with a cloud-based IT management solution, it is crucial for "ABC" to have proper policies and procedures in place to manage changes in their production environment effectively. This control ensures that any changes made to business-critical applications, customer-impacting systems, API designs and configurations, and infrastructure network and system components are carefully managed and their associated risks are assessed.

CCC-05