Certified in Risk and Information Systems Control (CRISC) — Question 1134

An organization has decided to migrate its critical system database containing customer information to branches located in other countries. Which of the following should be of MOST concern regarding the migration?

Answer options

• A. Regional regulatory requirements regarding the protection of sensitive data
• B. Database synchronization and encryption policies
• C. Security configurations of the database system after migration
• D. Fault tolerance of each database with customer information

Correct answer: A

Explanation

The most critical issue is regional regulatory requirements regarding the protection of sensitive data, as failing to comply can lead to significant legal penalties. While database synchronization, security configurations, and fault tolerance are important, they do not carry the same level of urgency or legal implications as ensuring compliance with local data protection laws.