Isaca Exam CISA Topic 4 Question 62 Discussion

Based on the information provided, the IS auditor should look for B: Project change management controls to ensure the risk associated with scope creep has been mitigated during software development. Project change management controls ensure that any changes made to the project are properly documented, communicated, and approved by the appropriate personnel. This helps to ensure that changes to the project are tracked and managed and that the project remains within its originally defined scope. Additionally, project change management controls help to ensure that any changes made are in line with the organization's goals and objectives.