MENU
You have been promoted to the CISO of a big-box retail store chain reporting to the Chief Information Officer (CIO). The CIO's first mandate to you is to develop a cybersecurity compliance framework that will meet all the store's compliance requirements.
Which of the following compliance standard is the MOST important to the organization?
Suggested Answer: D
Get Premium 712-50 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
14 comments · newest first
CO
Colette
12 months ago
Wait, FedRAMP? Isn't that for cloud services?
CE
Cecil
12 months ago
I agree, PCI DSS is the top priority here.
HA
Haley
12 months ago
ISO 27002 is great, but PCI is a must for payment data.
AN
Andra
1 year ago
I don't know, isn't NIST more comprehensive?
PO
Polly
1 year ago
Definitely PCI DSS, it's crucial for retail!
LI
Lindy
1 year ago
ISO 27002 covers information security management, but I feel like PCI DSS is the most relevant here due to the nature of retail transactions.
BR
Brandon
1 year ago
I practiced a question similar to this, and I think FedRAMP is more for cloud services, so it might not be the best fit for a retail environment.
SE
Sena
1 year ago
I’m not entirely sure, but I think the NIST Cybersecurity Framework is more general and might not be as specific to retail compliance needs.
SU
Suzi
1 year ago
I remember studying PCI DSS in relation to retail, since it focuses on protecting payment card information. That seems crucial for a big-box store.
JE
Jettie
1 year ago
Okay, let me think this through. Salesforce is the master for sales data, and the ERP is the master for invoice, order, and payment data. So the key is to determine the proper use of these systems based on that information.
MA
Mammie
1 year ago
This looks like a straightforward risk management question. I think the answer is C - both a hold-harmless contract clause and a waiver of subrogation can be used to transfer risks.
YO
Yolando
1 year ago
Hmm, I'm a bit unsure about this one. Should we add the code cleanup to the current iteration or the next one? And do we need to get explicit approval from the product owner?
SH
Sharika
1 year ago
Wait, what were the noncovered items again? I think we need to subtract those from the total billed charges to find out what McBee pays.
RA
Rashida
1 year ago
I'm a bit confused on the differences between the options. I'll need to review my notes on cryptographic algorithms to make sure I understand which one is best for ensuring message integrity.