CISM Certification Exam Questions with AI Explanations

QUESTION: 236

In a multinational organization, local security regulations should be implemented over global security policy because:

deploying awareness of local regulations is more practical than of global policy.
global security policies include unnecessary controls for local businesses.
business objectives are defined by local business unit managers.
requirements of local regulations take precedence.

Answer(s): D

QUESTION: 237

Which of the following is the BEST way to ensure that organizational security policies comply with data security regulatory requirements?

Obtain annual sign-off from executive management.
Align the policies to the most stringent global regulations.
Outsource compliance activities.
Send the policies to stakeholders for review.

Answer(s): C

Reveal Solution Next Question

QUESTION: 238

An organization has acquired a company in a foreign country to gain an advantage in a new market. Which of the following is the FIRST step the information security manager should take?

Merge the two existing information security programs.
Determine which country’s information security regulations will be used.
Apply the existing information security program to the acquired company.
Evaluate the information security laws that apply to the acquired company.

Answer(s): D

Reveal Solution Next Question

QUESTION: 239

Which of the following should be done FIRST when establishing a new data protection program that must comply with applicable data privacy regulations?

Create an inventory of systems where personal data is stored.
Encrypt all personal data stored on systems and networks.
Evaluate privacy technologies required for data protection.
Update disciplinary processes to address privacy violations.

Answer(s): C

Reveal Solution Next Question

QUESTION: 240

To help users apply appropriate controls related to data privacy regulation, what is MOST important to communicate to the users?

Features of data protection products
Data storage procedures
Results of penetration testing
Data classification policy

Answer(s): B

Reveal Solution Next Question

ISACA Certified Information Security Manager CISM Dumps in PDF

Free ISACA CISM Real Questions (page: 48)

QUESTION: 236

QUESTION: 237

QUESTION: 238

QUESTION: 239

QUESTION: 240