Study. uk . com
  1. Home
  2. All questions
  3. Question 63

CISM study material · question 63 of 1000

An organisation subject to several regulators finds their requirements pull in different directions on evidence and reporting. How does NIST characterise this situation?

  1. Requirements from multiple governing bodies are seldom contradictory but not always complementary, leaving the organisation to reconcile them
  2. Requirements from multiple bodies are always contradictory and one must be chosen
  3. The most recently issued requirement automatically supersedes the others
  4. Conflicts of this kind indicate the organisation has misread at least one requirement
Show the answer

Answer: A. Requirements from multiple governing bodies are seldom contradictory but not always complementary, leaving the organisation to reconcile them

NIST describes balancing extensive requirements from multiple governing bodies as a common governance challenge, noting they are seldom contradictory but not always complementary, so organisations face different compliance and monitoring measures.

Source: NIST SP 800-100 (NIST) — Sec. 2.3 Challenges and Keys to Success

Challenge yourself on this topic → Study as cards