CRISC: Certified in Risk and Information Systems ControlDemo

By Isaca · Question Mode

QuestionQ123

Governance

Following recent security incidents, the IT risk management team is advancing a global security plan that specifies controls for implementation across multiple regions. Which of the following BEST supports the successful deployment of this plan?

  • A Obtain the approval of each regional head.
  • B Engage an external auditor in each region before deployment.
  • C Provide each region with adequate funding.
  • D Allow each region to adapt the plan to its local requirements
Explanation

A global security plan must account for differing regional legal, regulatory, operational, and cultural conditions. Allowing regions to adapt implementation to their local requirements promotes adoption and makes the required controls practical while preserving the plan’s security objectives.

Community Discussion

No comments yet. Be the first to start the discussion!