Security and Risk Management
Question #86
As a CISO of a multinational company, what is an essential consideration when formulating policies for Personally Identifiable Information (PII) and data breaches?
A. The interpretation of PII and the obligations related to notifying about breaches can differ across various countries.
B. The Responsibilities of the Data Subjects can differ across various countries.
C. The C-levels must be informed about every single policy release, regardless of impact.
D. For each procedure, it is imperative to issue at least a standard or a guideline.
Domain Concept: Security and Risk Management
This scenario evaluates management-level decision making in Security and Risk Management. In CISSP exam scenarios, evaluate answers through executive governance, risk assessment, life safety, and due diligence before implementing technical controls.
💡 View the Answer & Detailed Explanation
The correct answer to this scenario-based question requires an understanding of the CISSP Managerial Mindset. Register to view our in-depth explanation and access 1100+ adaptive questions completely free.