Question

During a critical production outage, a developer applies an emergency code fix directly to the production environment to restore service. Once service is restored, the risk practitioner is asked to evaluate the process. Which action is MOST important to ensure the change management control environment remains effective?

Accepted Answer

Retroactively document, review, and approve the emergency change through the formal change management process

Answer

Prohibit all future direct changes to production regardless of business urgency

Answer

Grant the developer standing administrative access to production to speed future fixes

Answer

Remove the emergency change and wait for the next scheduled release window to reapply it