Section: Volume B
Explanation:
Integrated change control is responsible for facilitating, documenting, and dispersing information on a proposed change to the project scope.
Integrated change control is a way to manage the changes incurred during a project. It is a method that manages reviewing the suggestions for changes and utilizing the tools and techniques to evaluate whether the change should be approved or rejected. Integrated change control is a primary component of the project's change control system that examines the affect of a proposed change on the entire project.
Incorrect Answers:
A: The configuration management system controls and documents changes to the project's product C: The change log documents approved changes in the project scope.
D: The scope change control system controls changes that are permitted to the project scope.

Risk appetite is the amount and type of risk that an organization is willing to accept in pursuit of its objectives.
Risk appetite is influenced by various factors, such as the organization's mission, vision, values, culture, stakeholders, resources, capabilities, etc. However, the factor that has the greatest influence on the organization's risk appetite is the business objectives and strategies, which are the desired outcomes and the plans to achieve them. The business objectives and strategies define the direction and scope of the organization, and the risk appetite reflects the level of risk that the organization is prepared to take to accomplish them. The risk appetite should be aligned with the business objectives and strategies, and should provide guidance for the risk management activities and decisions. References = CRISC Review Manual, 7th Edition, page 61.

is incorrect. Trusted source refers to the commitment of the people designing,
implementing, and maintenance of the control towards the security policy.