Which of the following should be an information security manager's PRIMARY concern when an organization is expanding business to a new country?

The correct answer is A. Compliance with local regulations. When an organization is expanding to a new country, the primary concern for an information security manager should be ensuring compliance with local regulations, including data protection laws, privacy requirements, and industry-specific regulations. Non-compliance can result…

Submitted by jordan8· Apr 18, 2026Information Security Governance

Question

Options

ACompliance with local regulations
BAbility to gather customer data
CCultural differences in the new country
DChanges in IT infrastructure

How the community answered

(26 responses)

A
54% (14)
B
12% (3)
C
27% (7)
D
8% (2)

Explanation

When an organization is expanding to a new country, the primary concern for an information security manager should be ensuring compliance with local regulations, including data protection laws, privacy requirements, and industry-specific regulations. Non-compliance can result in legal penalties, reputational damage, and business disruptions. While cultural differences, data gathering, and infrastructure changes are important, they do not carry the same immediate, legal and operational risks as ensuring compliance with the new country’s legal and regulatory

Topics

#Regulatory compliance#International expansion#Legal requirements#Information security governance

Community Discussion

No community discussion yet for this question.

Full CISM Practice