CISA Question 120

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose C2

  Adherence to data protection legislation and regulations ensures legal compliance, mitigates the risk of regulatory fines or penalties, and helps protect the organization's reputation. Since data protection laws can vary significantly between jurisdictions, it's essential for a global organization to ensure that its controls align with the specific requirements of each location where it operates. This includes complying with regulations such as the General Data Protection Regulation (GDPR) in the European Union, the Health Insurance Portability and Accountability Act (HIPAA) in the United States, and other relevant laws and regulations worldwide. While technical capabilities (Option D) are important for managing data and recovery operations, legal compliance with data protection legislation and regulations (Option C) takes precedence as non-compliance can have severe consequences for the organization.

• Chose C1

  When reviewing a global organization’s controls to protect data held on its IT infrastructure across all locations, relevant data protection legislation and regulations for each location are MOST important. Ensuring compliance with privacy laws and regulations is crucial to safeguarding sensitive information and avoiding legal consequences

• 1

  C. Relevant data protection legislation and regulations for each location are adhered to.