CISSP/CISM/CCSP Test Taking Tip #7. It always about the business.

I have been teaching CISSP since 2003 as my full-time job! I have learned a few things along the way. Here is test-taking tip #7. There are plenty more. Every test-taking tip does not work for every question. But the more you know and remember them the easier it gets to use them when encountering any specific question.
Many thanks to @Pocket-prep for the question!

[@rogerk6554]

Great Tips. Greatly helped me in clearing my CCSP exam. Getting knowledge from the books/materials is a big thing, but to apply that knowledge to solve the tricky questions require these tips.

[@JohnJohn-sf1df]

People, Process, Technology. Great advice for CISSPs and CISOs.

[@GwenBettwyTSI]

That is why I like these certifications. They are good info!

[@frob530]

Thank you, keep em coming :)

[@GwenBettwyTSI]

Will do!

[@kiranmayeekummari7314]

Hi. Quick question. Normally when we look at the answers, Law is also an important aspect. And business has to be done as per the laws. So how do we balance between Law and Business if both the options exist?

[@GwenBettwyTSI]

This is a hard thing for me to say... Compliance with the law (any one of them) is a business decision that needs to be made. Keep that in mind when looking at the answers. Meeting the needs and wants of the business, the goals and objectives, should include following the law. Or... whatever level of following the law the business decides to do.

[@kalumranatunga8029]

@@GwenBettwyTSI Hi Madam, I think legal aspects will be address during Risk assessment as a part of considering continuation the Business .., Pls comment .,

[@GwenBettwyTSI]

@@kalumranatunga8029 They should be addressed then yes. There is a risk to not being in compliance. It is a legal risk assessment that needs to be done.

[@julianaoren8024]

😊 P r o m o s m

[@GwenBettwyTSI]

There is no simple answer to this unfortunately. However, if there is a legal question of some sort and there is a more generic question that says something about it is a business decision based on their needs, risks or something else then that is likely a better answer. It is hard for me to say, but, following a law and ensuring compliance is a business decision. It is their choice to ensure compliance or take the risk of some compromise and the consequences with the law and their customers.

[@gaiushammond4365]

In some ways this is a corollary of tip 4

[@GwenBettwyTSI]

In a way yes. Just very specific reference to the business, corporation or enterprise that is different here.