Which practices help minimize security risk during change management for a trusted agent?

• A. Implement changes without verification to speed response.
• B. Require formal approval, testing, and documentation of changes; maintain configuration baselines and audit trails.
• C. Avoid keeping baselines to save storage.
• D. Allow changes as long as users request them informally and no audit trails are kept.

Answer: (B)