QuestionQ803

Information Security Governance

An information security manager at a multinational organization has been asked to consolidate the information security policies of its regional locations. Which of the following would be the GREATEST concern?

  • A Varying threat environments
  • B Disparate reporting lines
  • C Conflicting legal requirements
  • D Differences in work culture
Explanation

Conflicting legal requirements may require different security-policy provisions in different jurisdictions. A consolidated policy that does not account for those requirements can create regulatory noncompliance.

Community Discussion

No comments yet. Be the first to start the discussion!