CompTIA Security+ (SY0-701)General Security ConceptsMedium
A change management process includes a category for routine, low-risk, pre-approved changes such as monthly antivirus signature updates, which do not require individual review by the change advisory board (CAB) each time. What type of change is this?
- AEmergency change
- BNormal change
- CStandard change
- DMajor change
Show answer & explanationAnswer & explanation
Correct answer: C. Standard change
A standard change is a pre-approved, low-risk, well-understood, and repeatable change that follows a documented procedure and does not require case-by-case CAB approval.
Why the other options are wrong
- A. Emergency changes address urgent issues and require expedited approval, not routine pre-approval.
- B. Normal changes require CAB review and approval on a case-by-case basis, unlike standard changes.
- D. Major change is not a standard ITIL/change management category term.
Standard Change
A low-risk, pre-approved, repeatable change that follows an established procedure without requiring individual CAB review.
- Pre-approved and well-documented
- Low risk and repeatable
- Contrasts with normal changes (require CAB approval) and emergency changes (urgent, expedited)
Memory trick: Standard = stamped in advance, no need to ask again.