QUESTION: 237

Which of the following is the BEST way to ensure that organizational security policies comply with data security regulatory requirements?

Obtain annual sign-off from executive management.
Align the policies to the most stringent global regulations.
Outsource compliance activities.
Send the policies to stakeholders for review.

Answer(s): C

Show Answer Next Question

QUESTION: 238

An organization has acquired a company in a foreign country to gain an advantage in a new market. Which of the following is the FIRST step the information security manager should take?

Merge the two existing information security programs.
Determine which country’s information security regulations will be used.
Apply the existing information security program to the acquired company.
Evaluate the information security laws that apply to the acquired company.

Answer(s): D

Show Answer Next Question

QUESTION: 239

Which of the following should be done FIRST when establishing a new data protection program that must comply with applicable data privacy regulations?

Create an inventory of systems where personal data is stored.
Encrypt all personal data stored on systems and networks.
Evaluate privacy technologies required for data protection.
Update disciplinary processes to address privacy violations.

Answer(s): C

Show Answer Next Question

QUESTION: 240

To help users apply appropriate controls related to data privacy regulation, what is MOST important to communicate to the users?

Features of data protection products
Data storage procedures
Results of penetration testing
Data classification policy

Answer(s): B

Show Answer Next Question

Free ISACA CISM Exam Braindumps (page: 61)

QUESTION: 237

QUESTION: 238

QUESTION: 239

QUESTION: 240

CISM Exam Discussions & Posts