How would an information security manager balance the potentially conflicting requirements of an
international organization’s security standards and local regulation?

A.
Give organization standards preference over local regulations

B.
Follow local regulations only

C.
Make the organization aware of those standards where local regulations causes conflicts

D.
Negotiate a local version of the organization standards

Explanation:

Adherence to local regulations must always be the priority. Not following local regulations can
prove detrimental to the group organization. Following local regulations only is incorrect since
there needs to be some recognition of organization requirements. Making an organization aware
of standards is a sensible step, but is not a total solution. Negotiating a local version of the
organization standards is the most effective compromise in this situation.