Exam CRISC topic 1 question 784 discussion

B. Understand data flows. When addressing the situation where a new data privacy regulation stipulates that data can only be processed within the country where it is collected, the first step should be to understand the data flows within the organization. This involves mapping out how data moves through the organization, where it is collected, how it is processed, and where it is stored. Understanding data flows is crucial because it allows the organization to identify any potential violations of the regulation and assess the impact on its systems and processes. It also helps in determining whether the organization is compliant with the regulation and what changes may be necessary to ensure compliance. This understanding forms the basis for making informed decisions and taking appropriate actions, such as analyzing data protection methods, implementing access controls, and considering right-to-audit clauses, to address the compliance requirements effectively.

Agree it is B. Data flows allow you to see point of origin and destination of data, so you could see if data started in one country but ended in another.