ISACA Certified in the Governance of Enterprise IT Practice Mode

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose B1

  Since it’s a Legal and Regulatory requirement, there are no compromises. It has to be complied with (zero tolerance) while its associated risks mitigated based on the risk appetite of the organization

• Chose B2

  How can one think of cost benefit analysis if it is a regulatory requirement. There should be zero tolerance towards it. Otherwise the regulator will penalize the organization for non compliance. Regulators usually bring guidelines after analyzing risk.

• Chose C1

  Answer should be C