Explanation/Reference:
Explanation:
The configuration management system ensures that proposed changes to the project's scope are reviewed and evaluated for their affect on the project's product.
Configure management process is important in achieving business objectives. Ensuring the integrity of hardware and software configurations requires the establishment and maintenance of an accurate and complete configuration repository. This process includes collecting initial configuration information, establishing baselines, verifying and auditing configuration information, and updating the configuration repository as needed. Effective configuration management facilitates greater system availability minimizes production issues and resolves issues more quickly.
Incorrect Answers:
A: The cost change control system is responsible for reviewing and controlling changes to the project costs.
C: The scope change control system focuses on reviewing the actual changes to the project scope. When a change to the project's scope is proposed, the configuration management system is also invoked.
D: Integrated change control examines the affect of a proposed change on the project as a whole.

Section: Volume D

The average time between user transfers and access updates is a trend that would cause the greatest concern regarding the effectiveness of an organization's user access control processes, as it indicates the delay or inefficiency in updating the user access rights and privileges according to the user's current role and responsibilities. This can result in unauthorized or excessive access to the organization's information assets, and increase the risk of data leakage, fraud, or misuse. The user access control processes should ensure that the user access rights and privileges are reviewed and modified regularly, and especially when the user's role or status changes, such as transfer, promotion, demotion, or termination. References = ISACA Certified in Risk and Information Systems Control (CRISC) Certification Exam Question and Answers, Question 241. CRISC:
Certified in Risk & Information Systems Control Sample Questions, Question 241. CRISC Sample Questions
2024, Question 241.

Section: Volume D