CGEIT: Certified in the Governance of Enterprise ITDemo

By Isaca · Question Mode

QuestionQ429

Governance of Enterprise IT

A CIO has received a final audit report indicating that enforcement of the enterprise mobile-device acceptable-use policy is inconsistent across all business units. Which of the following should be the FIRST step to address this issue?

  • A Review the relevance of existing policy.
  • B Implement controls to enforce the policy.
  • C Mandate awareness training for all mobile device users.
  • D Incorporate compliance metrics into performance goals.
Explanation

The mobile-device acceptable-use policy should first be reviewed to confirm that it remains relevant, clear, and suitable for consistent enterprise-wide application. Enforcement controls, training, and performance measures should be designed only after the policy itself has been validated.

Community Discussion

No comments yet. Be the first to start the discussion!