CERTIFIED-IN-CYBERSECURITY · Question #161
CERTIFIED-IN-CYBERSECURITY Question #161: Real Exam Question with Answer & Explanation
The correct answer is B: Regulations. Regulations are created by governments or national authorities, and often lead to financial fines for infringement. For example, the EU's GDPR prescribes penalties of up to 2% of annual revenue. Standards are created by governing or professional bodies (not by governments), and t
Question
In the event of non-compliance, which of these can have considerable financial consequences for an organization?
Options
- AStandards
- BRegulations
- CPolicies
- DGuidelines
Explanation
Regulations are created by governments or national authorities, and often lead to financial fines for infringement. For example, the EU's GDPR prescribes penalties of up to 2% of annual revenue. Standards are created by governing or professional bodies (not by governments), and thus are not legally enforceable. Regulations are mandatory, while standards are voluntary. Policies and guidelines are internal to organizations, and are therefore not subject to financial penalties (see ISC2 Study Guide Chapter 1, Module 4).
Topics
Community Discussion
No community discussion yet for this question.