Certified in Risk and Information Systems Control (CRISC) — Question 584

A global organization is planning to collect customer behavior data through social media advertising. Which of the following is the MOST important business risk to be considered?

Answer options

• A. Regulatory requirements may differ in each country.
• B. Business advertising will need to be tailored by country.
• C. The data analysis may be ineffective in achieving objectives.
• D. Data sampling may be impacted by various industry restrictions.

Correct answer: A

Explanation

The correct answer is A because regulatory requirements can vary significantly across different countries, potentially leading to legal issues if not adhered to. Options B, C, and D, while relevant to the advertising strategy, do not pose as significant a risk as failing to comply with varying regulations, which could result in severe penalties or reputational damage.