nerdexam
Isaca

CISM · Question #585

The executive management of a domestic organization has announced plans to expand operations to multiple international locations. Which of the following should be the information security manager's FI

The correct answer is D. Research legal and regulatory requirements impacting the new locations.. Understanding the legal and regulatory requirements in new international locations is the first critical step, as these requirements directly influence the design and implementation of compliant security controls and policies.

Submitted by parkjh· Apr 18, 2026Information Security Governance

Question

The executive management of a domestic organization has announced plans to expand operations to multiple international locations. Which of the following should be the information security manager's FIRST step upon learning of these plans?

Options

  • APrepare localized information security policies for each new location.
  • BPerform a gap analysis against international information security standards.
  • CUpdate security training and awareness resources accordingly.
  • DResearch legal and regulatory requirements impacting the new locations.

How the community answered

(50 responses)
  • A
    6% (3)
  • B
    2% (1)
  • C
    10% (5)
  • D
    82% (41)

Explanation

Understanding the legal and regulatory requirements in new international locations is the first critical step, as these requirements directly influence the design and implementation of compliant security controls and policies.

Topics

#Legal & Regulatory Compliance#International Expansion#Strategic Planning#Information Security Governance Fundamentals

Community Discussion

No community discussion yet for this question.

Full CISM Practice