CGEIT: Certified in the Governance of Enterprise IT

By Isaca · Question Mode

QuestionQ61

VerifiedRisk Optimization

A CIO has just become aware of a new regulatory requirement that could affect IT-enabled business activities. Which of the following should be the CIO's FIRST step in determining the appropriate response to the new requirement?

Explanation

The regulatory requirement must be interpreted and assessed for applicability, obligations, and risk before the organization can plan mitigation resources, escalate for governance guidance, or revise active initiatives. Legal and risk experts provide that foundational compliance analysis.

Community Discussion

No comments yet. Be the first to start the discussion!