Change management · Question 11 of 12

On Friday evening, an admin applies an urgent security patch without a change request because the vendor reports active attacks. The patch works. How is this best assessed from a change management perspective?

1 answer is correct. Hard

1. A Since the patch worked, no further documentation is needed at all
2. B Security patches are always exempt from change management
3. C Allowed as an emergency change under a set procedure, with documentation afterwards
4. D Remove the patch until the next CAB meeting