問題文
A widely exploited flaw is announced and the team applies the fix to production the same night without going through the change process. How should the auditor evaluate that action?
選択肢
- The action is acceptable when documented preapproved emergency path exists in the process, provided the team then supplies updated network diagrams notes within the agreed remediation window.
- The action is acceptable when documented preapproved emergency path exists in the process, provided the team then supplies complete change records within the agreed remediation window.
- The action is acceptable when accepted manager verbal consent exists in the process, provided the team then supplies updated network diagrams notes within the agreed remediation window.
- The action is acceptable when accepted manager verbal consent exists in the process, provided the team then supplies complete change records within the agreed remediation window.