CGEIT: Certified in the Governance of Enterprise IT

A business case should be established first to confirm that a BYOD program supports organizational objectives and to evaluate its benefits, costs, risks, and required investment. The policy, technical capacity, and data-access security controls can then be defined based on that approved justification and scope.