Discuss Isaca CISM Exam Topic 6 Question 29

An organization has acquired a company in a foreign country to gain an advantage in a new market Which of the following is the FIRST step the information security manager should take?

AApply the existing information security program to the acquired company

BEvaluate the information security laws that apply to the acquired company

CMerge the two existing information security programs

DDetermine which country's information security regulations will be used

Suggested Answer: B

Get Premium CISM Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

13 comments · newest first

Roy 11 months ago

D is crucial too, but I lean towards B for priority.

Jerry 11 months ago

C is too hasty, merging programs should come later.

Leslee 11 months ago

Surprised that people think A is the best step, laws matter!

Arlie 12 months ago

I think A makes more sense, just apply what you have.

Lenna 12 months ago

Definitely B, gotta know the laws first!

Tracey 1 year ago

I recall a similar question where determining regulations was emphasized. So, option D might be a good starting point, but I’m still debating between that and B.

Jeannine 1 year ago

I'm not entirely sure, but I remember a practice question where we had to consider compliance first. So maybe option B is the right choice?

Nickolas 1 year ago

I think the first step should be to evaluate the information security laws that apply to the acquired company. It seems crucial to understand the legal landscape before anything else.

Kasandra 1 year ago

Merging the two security programs sounds like a logical step, but I feel like we should assess the legal requirements first. It’s tricky!

Armanda 1 year ago

I'm not too familiar with Merkle trees, but from what I recall, they're a way to efficiently store and verify data in a distributed network. I'll go with option A, but I'm not 100% confident.

Delisa 1 year ago

Okay, I think I've got a handle on this. I'll need to set up the freight allocation properly in the system to ensure the charges are distributed proportionately.

Vivan 1 year ago

I'm a bit unsure about this one. I'll need to double-check the SCSI device naming scheme to make sure I have the right answer.

Yuonne 1 year ago

Partnering could be an advantage, but I'm not sure if that's the primary reason for using multiple suppliers. Feels like it could go either way.

Isaca CISM Exam - Topic 6 Question 29 Discussion