Question

During a review of the release management process, an IS auditor discovers that developers are able to deploy their own code directly into the production environment after completing unit testing, without a separate release coordinator approving the migration. Which of the following is the auditor's GREATEST concern with this practice?

Accepted Answer

Unauthorized or untested changes could be introduced into production because segregation of duties between development and deployment is absent

Answer

Unit test cases may not fully cover all functional requirements of the application

Answer

The release notes may not be distributed to end users before the deployment

Answer

Deployment during business hours could degrade system performance