hardMultiple SelectObjective-mapped
CRISC Practice Question: A multinational corporation is implementing…
A multinational corporation is implementing continuous monitoring of its compliance with data privacy regulations across multiple jurisdictions. Which TWO of the following are significant challenges to this approach?
⚠ Common exam trap
The trap here is that candidates often select 'Lack of skilled personnel' (E) as a generic challenge, but the CRISC exam focuses on the technical and process-oriented obstacles specific to continuous monitoring across jurisdictions, such as inconsistent requirements (A) and data repository conflicts (D).
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Inconsistent regulatory requirements across jurisdictions.
A is correct because data privacy regulations (e.g., GDPR, CCPA, LGPD) have conflicting requirements for data retention, consent, breach notification, and cross-border transfer. Continuous monitoring must reconcile these differences, often requiring jurisdiction-specific rule sets and mapping controls to multiple legal frameworks, which introduces significant complexity and risk of non-compliance.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Inconsistent regulatory requirements across jurisdictions.
Why this is correct
Different laws require tailored monitoring criteria, complicating a unified system.
- ✗
The need for manual data collection.
Why it's wrong here
Continuous monitoring aims to automate data collection, so manual collection is contrary.
- ✗
High cost of automation tools.
Why it's wrong here
Cost is a general barrier, not specific to multi-jurisdictional compliance.
- ✓
Difficulty in establishing a single data repository.
Why this is correct
Data residency laws may prohibit centralized storage of personal data.
- ✗
Lack of skilled personnel.
Why it's wrong here
Skill shortage is a common issue, not unique to this scenario.
Go deeper
Related to this question
About these practice questions
One of 983 original CRISC practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CRISC practice question is part of Courseiva's free ISACA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CRISC exam.