Question

A multinational manufacturer operates in several countries where privacy and cybersecurity laws are frequently changing. The information security manager wants to ensure the security strategy continues to satisfy legal and regulatory obligations over time without requiring an emergency response every time a new law is enacted. Which action would BEST support this objective?

Accepted Answer

Establish an ongoing legal and regulatory monitoring process with defined ownership and integration into the governance framework

Answer

Adopt the strictest single jurisdiction's requirements as the global baseline for all operations

Answer

Engage external counsel to perform an annual compliance audit against current regulations

Answer

Increase the frequency of vulnerability assessments across all regional facilities