CISA Certified Information Systems Auditor – Question0557

In a multinational organization, local security regulations should be implemented over global security policy because:

A.
global security policies include unnecessary controls for local businesses
B. business objectives are defined by local business unit managers
C. requirements of local regulations take precedence
D. deploying awareness of local regulations is more practical than of global policy

Correct Answer: C