During the planning phase of a penetration test for a multinational corporation with offices in several countries, which approach is the MOST effective to ensure compliance with varying local encryption standards and laws?
Presume the client has a comprehensive understanding of international encryption laws and will guide the testing process.
Avoid any engagement with datacenters located in countries known for strict encryption laws, to simplify compliance.
Employ an international legal team to review and advise on encryption standards and laws for each country involved.
Refuse to sign any engagements that could potentially conflict with the strictest international encryption standards.