CAS-003 · Question #346
An organization is engaged in international business operations and is required to comply with various legal frameworks. In addition to changes in legal frameworks, which of the following is a…
The correct answer is C. Responding to changes in regulatory requirements. Compliance management programs primarily exist to ensure an organization adapts to and satisfies regulatory requirements across all jurisdictions where it operates.
Question
An organization is engaged in international business operations and is required to comply with various legal frameworks. In addition to changes in legal frameworks, which of the following is a primary purpose of a compliance management program?
Options
- AFollowing new requirements that result from contractual obligations
- BAnswering requests from auditors that relate to e-discovery
- CResponding to changes in regulatory requirements
- DDeveloping organizational policies that relate to hiring and termination procedures
How the community answered
(43 responses)- A2% (1)
- B5% (2)
- C91% (39)
- D2% (1)
Why each option
Compliance management programs primarily exist to ensure an organization adapts to and satisfies regulatory requirements across all jurisdictions where it operates.
Contractual obligations are a secondary driver managed through vendor/contract management programs, not the primary purpose of compliance management.
Responding to e-discovery requests is a legal and records-management function, not a core compliance management activity.
Responding to changes in regulatory requirements is the primary purpose of a compliance management program. Regulations such as GDPR, HIPAA, and PCI-DSS are externally imposed legal obligations that carry penalties for non-compliance, and the compliance function exists specifically to monitor, interpret, and implement controls in response to these evolving mandates.
Developing HR policies for hiring and termination is a human resources function, not a primary compliance management objective.
Concept tested: Purpose of organizational compliance management programs
Source: https://csrc.nist.gov/publications/detail/sp/800-53/rev-5/final
Topics
Community Discussion
No community discussion yet for this question.