CGEIT: Certified in the Governance of Enterprise ITDemo

By Isaca · Question Mode

QuestionQ162

Risk Optimization

An IT risk committee is seeking to mitigate risk related to a newly implemented bring-your-own-device (BYOD) policy and supporting mobile device management (MDM) tools. Which of the following would be the BEST way to ensure that employees understand how to protect sensitive corporate data on their mobile devices?

  • A Require staff to review and sign nondisclosure agreements (NDAs)
  • B Require staff to complete security awareness training
  • C Develop security procedures for mobile devices
  • D Distribute the BYOD policy on the company Intranet
Explanation

Security awareness training gives employees direct instruction on secure mobile-device practices and handling sensitive corporate data. Policies, procedures, and nondisclosure agreements establish expectations and obligations, but training is the most effective way to build employee understanding of how to apply those protections.

Community Discussion

No comments yet. Be the first to start the discussion!