A retail company is expanding into a new international market. The expansion involves processing customer data in a region with strict data protection laws. What should the security manager do first to ensure the expansion aligns with security requirements?

Implement the same security measures used in the home country to save time.

Design a new security architecture for the international operations.

Elicit security requirements from the new market's regulatory and business context.

Allocate budget for additional security tools and personnel.

A company wants to implement a comprehensive security strategy that includes a new SIEM, a SOAR platform, and a 24/7 SOC. The current security team has three analysts with no experience in these technologies. The budget is limited. What is the most appropriate approach?

Delay the implementation until the team has the necessary skills.

Train the existing analysts on the new technologies and implement the strategy in phases.

Implement the SIEM and SOAR without a SOC, relying on automated alerts only.

Hire a managed security service provider (MSSP) to operate the SOC while the internal team focuses on other tasks.

When designing a security architecture for a new business unit, the architect ensures that the proposed controls support the unit's operational goals while also mitigating identified risks. What is the primary alignment being achieved?

Threat intelligence integration

Information Systems Security Management Professional

Domain 1Objective 3

1.3 Define and Implement Information Security Strategies ISSMP Practice Questions (Page 5)

Part of the Leadership and Organizational Management domain, which accounts for 21% of the ISSMP exam. ISC2 does not publish an official question count, but from its 180-minute exam (~70–120 total, ~15–25 in this domain), expect 2–3 from this objective — we provide 26 practice questions to prepare you well beyond it. (estimate)

26questions here

6free pages

6concepts

21%of the exam

Questions 21–25

21application · medium
A retail company is expanding into a new international market. The expansion involves processing customer data in a region with strict data protection laws. What should the security manager do first to ensure the expansion aligns with security requirements?
Select an answer first
22foundation · easy
A security architect designs a multi-layered set of controls that includes firewalls, intrusion detection, endpoint protection, and data encryption. Which principle is being applied?
Select an answer first
23foundation · easy
An organization wants to adopt a zero-trust architecture but is unsure whether its security team has the skills to manage the required identity and access management tools. Which assessment directly addresses this concern?
Select an answer first
24expert · hard
A company wants to implement a comprehensive security strategy that includes a new SIEM, a SOAR platform, and a 24/7 SOC. The current security team has three analysts with no experience in these technologies. The budget is limited. What is the most appropriate approach?
Select an answer first
25foundation · easy
When designing a security architecture for a new business unit, the architect ensures that the proposed controls support the unit's operational goals while also mitigating identified risks. What is the primary alignment being achieved?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to ISSMP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “ISSMP” is a trademark of its owner, used for identification only.

1.3 Define and Implement Information Security Strategies ISSMP Practice Questions (Page 5)

Questions 21–25

A retail company is expanding into a new international market. The expansion involves processing customer data in a region with strict data protection laws. What should the security manager do first to ensure the expansion aligns with security requirements?

A security architect designs a multi-layered set of controls that includes firewalls, intrusion detection, endpoint protection, and data encryption. Which principle is being applied?

An organization wants to adopt a zero-trust architecture but is unsure whether its security team has the skills to manage the required identity and access management tools. Which assessment directly addresses this concern?

A company wants to implement a comprehensive security strategy that includes a new SIEM, a SOAR platform, and a 24/7 SOC. The current security team has three analysts with no experience in these technologies. The budget is limited. What is the most appropriate approach?

When designing a security architecture for a new business unit, the architect ensures that the proposed controls support the unit's operational goals while also mitigating identified risks. What is the primary alignment being achieved?

Keep studying — Leadership and Organizational Management