IsacaIsaca
CISM · Question #528
CISM Question #528: Real Exam Question with Answer & Explanation
Sign in or unlock CISM to reveal the answer and full explanation for question #528. The question stem and answer options stay visible for context.
Submitted by olafpl· Apr 18, 2026Information Security Risk Management
Question
An organization is MOST likely to accept the risk of noncompliance with a new regulatory requirement when:
Options
- Aemployees are resistant to the controls required by the new regulation.
- Bthe regulatory requirement conflicts with business requirements.
- Cthe risk of noncompliance exceeds the organization's risk appetite.
- Dthe cost of complying with the regulation exceeds the potential penalties.
Unlock CISM to see the answer
You've previewed enough free CISM questions. Unlock CISM for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.
Topics
#Risk acceptance#Compliance risk#Cost-benefit analysis#Regulatory compliance