nerdexam
(ISC)2

CERTIFIED-IN-CYBERSECURITY · Question #445

Which of the following is a law with multinational implications?

The correct answer is B. GDPR. The General Data Protection Regulation (GDPR) is an EU regulation that has multinational reach: it applies to any organization worldwide that processes the personal data of EU/EEA residents, regardless of where the organization is based. ISO 27001 and ISO 27002 are…

Security Principles

Question

Which of the following is a law with multinational implications?

Options

  • ANIST 803
  • BGDPR
  • CISO 27002
  • DISO 27001

How the community answered

(21 responses)
  • B
    90% (19)
  • C
    5% (1)
  • D
    5% (1)

Explanation

The General Data Protection Regulation (GDPR) is an EU regulation that has multinational reach: it applies to any organization worldwide that processes the personal data of EU/EEA residents, regardless of where the organization is based. ISO 27001 and ISO 27002 are international standards and frameworks (not laws), and 'NIST 803' is not a recognized standard (NIST publishes Special Publication 800-series guidelines, which are US-focused frameworks, not binding international law).

Topics

#GDPR#Multinational Law#Data Privacy Regulation#Compliance

Community Discussion

No community discussion yet for this question.

Full CERTIFIED-IN-CYBERSECURITY Practice