What is the primary purpose of change management in trusted environments?

• A. It speeds up deployment regardless of risk.
• B. It ensures changes are reviewed, approved, tested, documented, and traceable to prevent unintended risk.
• C. It eliminates the need for security monitoring.
• D. It centralizes all access control.

Answer: (B)

Change management in trusted environments is about controlling modifications to the system in a deliberate, auditable way. The primary purpose is to ensure that any change goes through review and approval, is thoroughly tested, is properly documented, and is traceable so responsible parties can understand what changed, why, and what the potential impacts are. This approach reduces unintended risk, supports accountability, and helps maintain security and reliability in high-assurance settings. Rushing deployments without risk consideration can introduce vulnerabilities or instability, and security monitoring remains necessary even with change controls. Centralizing access control is a separate concern handled by identity and access management, not the core aim of change management.