Question

During a production outage, a development team applies an emergency patch to a customer-facing application to restore service. The patch bypassed the standard code review and security testing gates. As the information security manager, what should you do FIRST after service is restored?

Accepted Answer

Ensure the emergency change is documented and retroactively assessed against the security review and testing requirements

Answer

Report the team to executive management for violating change management policy

Answer

Roll back the emergency patch and reapply it through the standard SDLC process

Answer

Add automated security scanning to the deployment pipeline to prevent future bypasses