nerdexam
(ISC)2

CERTIFIED-IN-CYBERSECURITY · Question #396

What is the difference between a standard and a regulation?

The correct answer is B. Standards set criteria to be met, while regulations are legally binding and must be followed. Standards are documented criteria, benchmarks, or specifications that define a level of quality or performance to be met (e.g., ISO 27001). They may be voluntary or mandatory depending on context. Regulations are rules issued by a governmental or authoritative body that are…

Security Principles

Question

What is the difference between a standard and a regulation?

Options

  • AStandards provide specific step-by-step instructions to achieve a task or process, while
  • BStandards set criteria to be met, while regulations are legally binding and must be followed
  • CStandards are optional and have no legal consequences, while regulations are legally binding and
  • DStandards are legally binding and must be followed, while regulations provide guidance on how to

How the community answered

(31 responses)
  • B
    94% (29)
  • C
    3% (1)
  • D
    3% (1)

Explanation

Standards are documented criteria, benchmarks, or specifications that define a level of quality or performance to be met (e.g., ISO 27001). They may be voluntary or mandatory depending on context. Regulations are rules issued by a governmental or authoritative body that are legally binding - non-compliance can result in legal penalties (e.g., GDPR, HIPAA). Option B correctly distinguishes these two: standards set the criteria, while regulations carry the force of law.

Topics

#Standards#Regulations#Compliance#Governance

Community Discussion

No community discussion yet for this question.

Full CERTIFIED-IN-CYBERSECURITY Practice