An organization has acquired a company in a foreign country to gain an advantage in a new market. Which of the following is the FIRST step the information security manager should take? 

Answer options:

A. Merge the two existing information security programs.
B. Determine which country`s information security regulations will be used.
C. Apply the existing information security program to the acquired company.
D. Evaluate the information security laws that apply to the acquired company.

D