CISM: Certified Information Security ManagerDemo

By Isaca · Question Mode

QuestionQ1039

Information Security Risk Management

An organization is conducting its annual review of the risk landscape. Which of the following expected changes will have the MOST significant impact on the information security strategy?

  • A The renewal and renegotiation of the organization's contract with its managed security services provider
  • B Migration of personal data to a new database system on a different server platform
  • C The expansion to an international location with unfamiliar security and privacy regulations
  • D Replacement of the aging enterprise-wide core firewall infrastructure with a new solution from a different vendor
Explanation

Entering an international location with unfamiliar security and privacy regulations can create new legal and compliance obligations that require organization-wide changes to governance, risk management, data protection, and security controls. This has a broader strategic effect than a provider contract renewal, a database migration, or a firewall replacement.

Community Discussion

No comments yet. Be the first to start the discussion!