Study. uk . com
  1. Home
  2. All questions
  3. Question 153

CISM study material · question 153 of 1000

A manager assumes that meeting the organisation's own internal policy is sufficient to satisfy CISM's compliance expectations. What does the job practice require in addition?

  1. Identifying the legal, regulatory, organisational and other applicable compliance requirements
  2. Reporting all compliance gaps to the regulator as soon as they are identified, ahead of any internal remediation
  3. Certifying every system against an international standard, so that external conformity evidence covers the whole of the estate
  4. Obtaining an external legal opinion on every control before it may be relied upon as a compliance measure
Show the answer

Answer: A. Identifying the legal, regulatory, organisational and other applicable compliance requirements

CISM lists identifying legal, regulatory, organisational and other applicable compliance requirements as a supporting task in its own right, distinct from applying internal policy.

Challenge yourself on this topic → Study as cards