CGEIT: Certified in the Governance of Enterprise IT

By Isaca · Question Mode

QuestionQ49

VerifiedRisk Optimization

An enterprise discovers that a new privacy regulation has recently been published to protect customers following a breach involving personally identifiable information (PII). The IT risk management team’s FIRST action should be to:

Explanation

A new privacy regulation may create compliance, legal, operational, and breach-related risks. The organization must first determine whether the regulation introduces new or changed risk before setting risk parameters or assigning accountability.

Community Discussion

No comments yet. Be the first to start the discussion!