CGEIT: Certified in the Governance of Enterprise ITDemo

By Isaca · Question Mode

QuestionQ26

Risk Optimization

A global technology company’s CIO is considering launching a bring your own device (BYOD) program. What should the CIO do FIRST?

  • A Ensure the infrastructure can meet BYOD requirements.
  • B Define a clear and inclusive BYOD policy.
  • C Establish a business case.
  • D Focus on securing data and access to data.
Explanation

A business case should be established first to confirm that a BYOD program supports organizational objectives and to evaluate its benefits, costs, risks, and required investment. The policy, technical capacity, and data-access security controls can then be defined based on that approved justification and scope.

Community Discussion

No comments yet. Be the first to start the discussion!