Exam SY0-501 topic 1 question 147 discussion

Change management is the process, tools and techniques to manage the people side of change to achieve the required business outcome. Change management incorporates the organizational tools that can be utilized to help individuals make successful personal transitions resulting in the adoption and realization of change

The CISO voices the need to evaluate the functionality of the newer desktop platform to ensure interoperability with existing software in use by the organization. In which of the following principles of architecture and design is the CISO engaging?. The question here is regarding the stage at which the software is before its deployment. Clearly the CISO wants a dynamic analysis instead of the static analysis of the new software to make sure the it is compatible with current applications. Change management is an administrative procedure to ensure changes are properly implemented.

Meyers 501 does offer some support for A , but I think the language on p532 more closely supports B Change Mangement: "The process of creating change in your infrastructure in an organized, controlled, safe way is called change management." It details more support in the entire section.

hope this helps...look at blue image of the top 8 architectureprincipals....no mention of dynamic analysis, but centralized Change Mgmt is in the bullet list. That being said, a quick google search of Dynamic Analysis reports a definition that leads me to second guess my whole train of thought!!! https://enterprisearchitect.blogs.bristol.ac.uk/category/design-authority/

B.In which of the following principles of (3.0 architecture and design) is the CISO engaging? Version control and change management Change in a secure environment can introduce loopholes, overlaps, missing objects, and oversights that can lead to new vulnerabilities. The only way to maintain security in the face of change is to manage change systematically. Change management usually involves extensive planning, testing, logging, auditing, and monitoring of activities related to security controls and mechanisms. The records of changes to an environment are then used to identify agents of change, whether those agents are objects, subjects, programs, communication pathways, or the network itself.

B is wrong. it should be C

B. A well-planed and controlled change management process for IT services will dramatically reduce the impact of IT infrastructure changes on the business. https://www.smartsheet.com/8-elements-effective-change-management-process