Which of the following should be evaluated FIRST?

exams CISA CISA exam 0 Comments

A multinational organization is introducing a security governance framework. The information security manager’s concern is that regional security practices differ.

Which of the following should be evaluated FIRST?
A . Local regulatory requirements
B . Local IT requirements
C . Cross-border data mobility
D . Corporate security objectives

Answer: A