Discuss how to tailor compliance.

What will be an ideal response?

Tailoring is a coherent conceptual exercise that drills down hierarchically, from the organization's environment all the way to the definition of discrete practices. Approaching the design that way ensures that the resultant management infrastructure will be both comprehensive and complete. Nevertheless, since the eventual outcome of the development process is an unambiguous set of controls, this process involves a set of successively more focused tailoring passes over the same topic in order to ensure that the requisite work practices are specified in adequate detail. The final product of that refinement process is a coherent and unambiguous set of concrete policies, procedures, and work practices which are directly aligned with each other and which precisely fit the specific requirements of that particular security environment.