nerdexam
Isaca

CISM · Question #748

A global organization is considering its geopolitical security risks. Which of the following is the information security manager's BEST approach?

The correct answer is D. Seek advice from enterprise risk and legal experts. When addressing geopolitical security risks, the best approach for an information security manager is to consult enterprise risk and legal experts, as they can provide comprehensive insight into legal, regulatory, and geopolitical implications across jurisdictions. This ensures…

Submitted by brentm· Apr 18, 2026Information Security Risk Management

Question

A global organization is considering its geopolitical security risks. Which of the following is the information security manager's BEST approach?

Options

  • AImplement a third-party risk management framework.
  • BSeek advice from environmental and physical security experts.
  • CImplement controls that deny access from specific jurisdictions.
  • DSeek advice from enterprise risk and legal experts.

How the community answered

(30 responses)
  • A
    3% (1)
  • B
    20% (6)
  • C
    7% (2)
  • D
    70% (21)

Explanation

When addressing geopolitical security risks, the best approach for an information security manager is to consult enterprise risk and legal experts, as they can provide comprehensive insight into legal, regulatory, and geopolitical implications across jurisdictions. This ensures that any response is both legally compliant and aligned with the organization’s overall risk posture.

Topics

#Geopolitical Risk#Enterprise Risk Management#Legal and Regulatory Compliance#Risk Strategy

Community Discussion

No community discussion yet for this question.

Full CISM Practice