An IS auditor performing an application maintenance audit would review the log of program
changes for the:
A.
authorization of program changes.
B.
creation date of a current object module.
C.
number of program changes actually made.
D.
creation date of a current source program.
Explanation:
The manual log will most likely contain information on authorized changes to a program.
Deliberate, unauthorized changes will not be documented by the responsible party. An automated
log, found usually in library management products, and not a changelog would most likely contain
date information for the source and executable modules.