CRISC: Certified in Risk and Information Systems ControlDemo

Question

Which of the following is MOST important for a multinational organization to consider when creating its security policies and standards?

A Industry-standard templates
B Ability to monitor and enforce compliance
C Differences in regulatory requirements
D Regional competitors’ policies and standards

Explanation

Security policies and standards for a multinational organization must accommodate differences in regulatory requirements across the jurisdictions in which it operates. These requirements can impose different obligations for privacy, data handling, retention, security controls, and reporting.

CRISC: Certified in Risk and Information Systems ControlDemo

AstroTutor

Notes

Readiness

QuestionQ106

Community Discussion