Which item is included in a change management/change control policy?

• A. Back out procedures
• B. Data retention schedule
• C. Marketing plan
• D. Security awareness training

Answer: (A)

The main idea here is that a change management policy includes a defined way to undo a change if it causes problems. Back-out procedures provide the exact steps to revert to the previous state, specify who can initiate the rollback, what conditions trigger it, and how systems are validated after rollback. This controlled reversal is essential to minimize downtime and risk during changes. The other items belong to different policy areas: data retention schedules come from data governance, marketing plans relate to product launches and communications, and security awareness training covers user education and security culture.