CGEIT: Certified in the Governance of Enterprise IT

By Isaca · Question Mode

QuestionQ5

VerifiedGovernance of Enterprise IT

A business case shows that an enterprise could lower costs by implementing a bring-your-own-device (BYOD) program that permits employees to use personal devices for e-mail. Which of the following should be the FIRST governance action?

Explanation

A BYOD initiative must begin with a risk assessment to identify the security, privacy, compliance, and data-protection exposures created by allowing personal devices to access enterprise e-mail. The resulting risk profile informs appropriate policy, architecture, and infrastructure changes.

Community Discussion

No comments yet. Be the first to start the discussion!