A company has implemented a compliance monitoring program. The CISO wants to ensure that the program provides timely notification of compliance issues to the appropriate stakeholders. Which practice should be implemented?

Report all compliance issues only in the annual report to the board.

Only report issues that have resulted in a data breach.

Allow each department to decide whether to report compliance issues.

Define escalation paths and service-level agreements (SLAs) for reporting compliance incidents to management and legal.

A company is subject to multiple regulations with different reporting cycles. The CISO must design a compliance reporting process that satisfies all stakeholders without overwhelming the compliance team. Which approach is most effective?

Create a unified compliance dashboard that aggregates data from all frameworks and provides role-based views for different stakeholders.

Automate all reporting and eliminate human review to save time.

Generate a separate report for each regulation on its own schedule, even if the content overlaps.

Report only to the most stringent regulator and assume others will accept it.

A company is expanding into a new market and must assess its compliance posture against several regulations. The CISO wants to prioritize the assessment based on the potential impact of non-compliance. Which approach should the CISO take?

Implement all controls from every framework simultaneously to ensure full compliance.

Conduct a compliance risk assessment that maps applicable regulations to business processes and evaluates the likelihood and impact of violations.

Focus only on the regulation with the highest potential fine, ignoring others.

Wait for a regulatory audit to identify gaps before taking action.

A CISO needs to report compliance status to the board but also wants to avoid overwhelming them with technical details. The company is subject to multiple regulations. What is the best approach?

Report only on areas of non-compliance

Provide a high-level dashboard with key compliance metrics and trends

Present detailed audit logs and technical findings

Delegate the report to the external auditor

A company must demonstrate ongoing compliance with SOX for financial reporting. The IT department is responsible for ensuring the integrity of financial systems. Which control is most directly aligned with SOX compliance?

Implementing change management controls for financial systems

Performing regular backups of financial data

Conducting annual security awareness training

EC-CouncilAssociate C|CISO

Domain 1Objective 3

Regulatory and Legal Compliance ACCISO Practice Questions (Page 3)

Part of the Governance, Risk, and Compliance domain, which makes up ~15% of our current practice bank. EC-Council does not publish an official question count, but from its 120-minute exam (~50–80 total, ~8–12 in this domain), expect 2–3 from this objective — we provide 37 practice questions to prepare you well beyond it. (estimate)

37questions here

8free pages

5concepts

Questions 11–15

11application · medium
A company has implemented a compliance monitoring program. The CISO wants to ensure that the program provides timely notification of compliance issues to the appropriate stakeholders. Which practice should be implemented?
Select an answer first
12expert · hard
A company is subject to multiple regulations with different reporting cycles. The CISO must design a compliance reporting process that satisfies all stakeholders without overwhelming the compliance team. Which approach is most effective?
Select an answer first
13application · medium
A company is expanding into a new market and must assess its compliance posture against several regulations. The CISO wants to prioritize the assessment based on the potential impact of non-compliance. Which approach should the CISO take?
Select an answer first
14expert · hard
A CISO needs to report compliance status to the board but also wants to avoid overwhelming them with technical details. The company is subject to multiple regulations. What is the best approach?
Select an answer first
15application · medium
A company must demonstrate ongoing compliance with SOX for financial reporting. The IT department is responsible for ensuring the integrity of financial systems. Which control is most directly aligned with SOX compliance?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to ACCISO

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “ACCISO” is a trademark of its owner, used for identification only.