Which governance response best addresses the challenge that remote work and global operations can create?
Answer
Review governance expectations so they remain applicable to changing operations and locations
Explanation
### Why this is right
The discussion explicitly asks how governance should address remote work and global operations. Reviewing expectations as operations change allows the organization to consider how its security direction applies across different work arrangements and locations.
### The concept
Governance must reflect how an organization actually operates. Changes in technology, workforce arrangements, or geographic reach can affect risk and obligations. The provided material does not prescribe a specific remote-work control, so a sound answer is to review and adapt governance rather than assume that one arrangement fits every context.
### The other options
- **B. Assume that existing controls work identically in every location without review**: this ignores the prompt's focus on changing operational conditions.
- **C. Remove employee awareness activities because staff work in different places**: the material identifies employee education as a governance element.
- **D. Limit risk reporting to the organization's headquarters**: this could leave leaders without information about risks elsewhere in the organization.
### Terms
- **Governance expectations**: The roles, requirements, and processes used to direct organizational activity.
### Remember
When operations change, review whether governance still covers the organization as it now works.
Related Questions
- Outsourcing payment processing to a third-party vendor completely transfers all regulatory compliance and data protection responsibilities away from the hiring organization.(intermediate)
- In an incident management exercise divided into discovery, investigation, response, and recovery, the phase focused on analyzing logs, alerts, and evidence to examine unauthorized activity is called _____.(basic)
- The recovery and compliance review phase can include a mock audit, ongoing monitoring, staff training, and improvements informed by the incident.(basic)
- A staff member accesses the billing system from an unprotected personal laptop, and suspicious activity alerts appear. Which response area is most directly implicated by this new information?(intermediate)
- During a tabletop incident response exercise involving potential payment card data compromise, which activity is the primary focus of the Discovery phase?(advanced)
Want to practice more questions like this?
Join myBenkio free and practice past questions for your Nigerian university courses with AI explanations for every answer.
Start Practicing Free