Question 1 of 6
A project team member implemented a technical improvement directly in production without raising a change request, arguing it was a minor fix. The change later caused a system outage. What process failed?
- A.Risk identification — the risk of introducing unauthorized changes was not formally identified, logged, and mitigated through the project's risk management process.
- B.Quality assurance — the fix was not tested adequately before deployment, allowing it to pass through without detection in the project's quality assurance process.
- C.Scope management — the hotfix added functionality outside the approved scope baseline, violating the project's defined boundaries without authorization from the change process.
- D.Integrated change control — all changes must be formally requested, evaluated, and approved before implementation.
Show answer and explanation
Correct answer: D
Integrated change control requires that all changes — regardless of perceived size — go through a formal request, impact assessment, and approval process. The team member bypassed this process entirely. While quality assurance and risk identification may also have gaps, the root cause is the absence of change governance.