A Chief Information Security Officer (CISO) Needs to Create a Policy

question 94

Multiple Choice

A Chief Information Security Officer (CISO) needs to create a policy set that meets international standards for data privacy and sharing. Which of the following should the CISO read and understand before writing the policies?

• A) PCI DSS
• B) GDPR
• C) NIST
• D) ISO 31000

---

Definitions:

Communities of Practice

A group of people who share a concern or a passion for something they do and learn how to do it better as they interact regularly.

Employee Networks

Groups or communities within an organization where employees can connect, share information, and support each other professionally and personally.

Webinars

Online seminars or presentations that enable interactive participation and communication between presenters and audience over the internet.

Broadcasts

The transmission of programs or information by radio or television to a wide audience.