Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
ISACA Certified Information Security Manager · Isaca
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
The BEST answer is D. Perform a gap analysis. ✅ Here’s why: • When a new cybersecurity regulation is introduced, the first step is to determine how current controls compare to the new requirements. This is exactly what a gap analysis does. • A. Consult legal counsel can help interpret requirements, but it doesn’t show where you currently stand. • B. Cost-benefit analysis comes after gaps are identified and mitigation options are being considered. • C. Update policies happens after you know what gaps exist and what controls need to change. 💡 CISA Exam Tip: • New regulations → Gap Analysis → Risk Assessment → Remediation → Policy Updates.
D. After any thing new is introduced especially regulation or new business an assessment needs to be done or some form of assessment needs to be done for context. The closest to this rule is "gap assessment".
Just following common sense I would consulta legal first... to get it clear and then do the gap analysis... maybe my common sense is wrong of course...