How does change management contribute to risk control?

• A. It ensures changes introduce no new risks
• B. It requires assessment of risks introduced by changes, implement controls, and communicate them before implementation
• C. It only documents changes after implementation
• D. It has no role in risk control

Answer: (B)

Proactive risk management in change processes means treating every proposed change as a potential source of risk and handling it carefully before it affects operations. Change management contributes to risk control by requiring a risk assessment of any proposed change, implementing controls to mitigate the identified risks, and communicating these controls to the relevant stakeholders before the change goes live. This approach helps prevent unanticipated problems, such as outages, security gaps, or performance issues, by addressing risks upfront and ensuring everyone understands and approves the plan. It also preserves traceability through proper documentation and change approvals. In contrast, simply documenting changes after they occur or ignoring the risk implications would miss the important preventive steps that reduce risk and protect operations.