CRISC: Certified in Risk and Information Systems ControlDemo

By Isaca · Question Mode

QuestionQ1152

Governance

Which of the following is MOST likely to be affected when a global organization is legally required to implement a new data-protection regulation throughout its operations?

  • A Risk ownership assignments
  • B Threat profile
  • C Vulnerability assessment results
  • D Risk profile
Explanation

A new data-protection law changes compliance requirements and can increase or alter legal, financial, operational, and reputational exposure. These changes affect the organization’s overall risk profile.

Community Discussion

No comments yet. Be the first to start the discussion!