Câu 186: Isaca Certified Information Security Manager

Which of the following should an information security manager do FIRST when assessing conflicting requirements between the global organization's security standards and local regulations?

1. A. Conduct a gap analysis against local regulations. — đáp án hiện tại
2. B. Perform a cost-benefit analysis of compliance.
3. C. Create a local version of the organizational standards.
4. D. Prioritize the organizational standards over local regulations.