Question # $6$:

Scenario:

You are conducting an audit of a software development company's change management

processes. During your assessment, you discover that there is no formalized process for

documenting and tracking changes to software code. As a result, unauthorized changes

may go unnoticed, leading to potential security breaches or system failures. Explain the

importance of change management in software development and outline the steps you

would recommend the company take to implement effective change control

procedures.

Question # $7$:

Scenario:

You have been assigned to audit the cloud infrastructure of a multinational corporation.

During your review, you identify that the company lacks visibility and control over the

access permissions granted to third$-$party service providers. Discuss the risks associated

with inadequate access management in cloud environments and propose strategies to

strengthen the company's oversight of third$-$party access and data protection.