An organization involved in e-commerce activities operating from its home country opened a new office in another country with stringent security laws. In this scenario, the overall security strategy…

The correct answer is A. the most stringent requirements. By adopting the most stringent requirements, the organization ensures compliance with the stricter local laws while inherently satisfying the less rigorous home-country standards. This “highest-common-denominator” approach minimizes regulatory risk and provides a uniform…

Submitted by amina.ke· Apr 18, 2026Information Security Governance

Question

An organization involved in e-commerce activities operating from its home country opened a new office in another country with stringent security laws. In this scenario, the overall security strategy should be based on:

Options

Athe most stringent requirements.
Bthe security organization structure.
Crisk assessment results.
Dinternational security standards.

How the community answered

(51 responses)

A
76% (39)
B
4% (2)
C
6% (3)
D
14% (7)

Explanation

By adopting the most stringent requirements, the organization ensures compliance with the stricter local laws while inherently satisfying the less rigorous home-country standards. This “highest-common-denominator” approach minimizes regulatory risk and provides a uniform security baseline across all locations.

Topics

#International compliance#Regulatory requirements#Security strategy#Risk mitigation

Community Discussion

No community discussion yet for this question.

Full CISM Practice