nerdexam
Isaca

CISM · Question #567

A global organization is moving its customer relationship management (CRM) system to a cloud platform. Which of the following is the MOST important consideration for legal and regulatory compliance?

The correct answer is B. Data storage location. Data storage location is critical for legal and regulatory compliance, especially in a global organization, due to data sovereignty and privacy laws that govern where and how personal data can be stored and processed.

Submitted by fatima_kr· Apr 18, 2026Information Security Governance

Question

A global organization is moving its customer relationship management (CRM) system to a cloud platform. Which of the following is the MOST important consideration for legal and regulatory compliance?

Options

  • ASeparation of duties
  • BData storage location
  • CClassification of security incidents
  • DMetrics for service level agreements (SLAs)

How the community answered

(35 responses)
  • A
    3% (1)
  • B
    74% (26)
  • C
    17% (6)
  • D
    6% (2)

Explanation

Data storage location is critical for legal and regulatory compliance, especially in a global organization, due to data sovereignty and privacy laws that govern where and how personal data can be stored and processed.

Topics

#Cloud Compliance#Data Residency#Regulatory Requirements#Data Sovereignty

Community Discussion

No community discussion yet for this question.

Full CISM Practice