Scenario: Most industries require compliance with multiple government regulations and/or industry standards to meet data protection and privacy mandates. What is one proven method to account for…

Question

Options

• AHire a GRC expert
• BUse the Find function of your word processor
• CDesign your program to meet the strictest government standards
• DDevelop a crosswalk

• A
  4% (2)
• B
  8% (4)
• C
  4% (2)
• D
  84% (43)

Explanation

Developing a crosswalk is the proven method because it maps common and overlapping requirements across multiple regulations (e.g., HIPAA, GDPR, PCI-DSS) into a single unified control set, eliminating redundant work and ensuring nothing is missed. Hiring a GRC expert (A) is a resource decision, not a methodology - an expert would themselves use a crosswalk. Using Find in a word processor (B) is a manual, error-prone tactic, not a systematic compliance strategy. Designing only to the strictest standard (C) seems logical but can miss requirements unique to other regulations that the strictest standard doesn't address.

Memory tip: Think of a crosswalk as a street crosswalk - it connects separate paths (regulations) at a shared intersection (common controls), letting you navigate all of them without walking each road twice.

No community discussion yet for this question.