Does anyone know the answer to the following question:
During an audit software development organization, an auditor found that the organization did not properly follow industry best practices including peer review and board approval prior to moving application into the production environment. The auditor recommended adopting a formal process incorporating these steps. To remediate the finding, the organization implemented:
- Incident management
- A configuration management board
- Asset management
- Change management