Study. uk . com
  1. Home
  2. All questions
  3. Question 45

CompTIA Security+ study material · question 45 of 611

An organisation passes its regulatory audit and is breached three months later. Which statement best explains how both can be true?

  1. Meeting a regulation's minimum leaves risks the regulation never contemplated
  2. Compliance findings are always retrospective
  3. The audit must have been performed incorrectly
  4. Regulations exclude technical controls
Show the answer

Answer: A. Meeting a regulation's minimum leaves risks the regulation never contemplated

Compliance is a floor set for a class of organisations, not a statement that this organisation's specific risks are managed.

Challenge yourself on this topic → Study as cards