CISSP: Certified Information Systems Security Professional

Question

An organization is rolling out a bring your own device (BYOD) policy. What would be BEST to mitigate the risk that users manage their own devices and could introduce malware?

Explanation

A dedicated external wired or wireless network isolates user-managed BYOD devices from the internal enterprise network, limiting their access to organizational resources and containing malware that an unmanaged device could introduce. NIST recommends strongly considering a separate, external, dedicated network for BYOD devices used within enterprise facilities.

Learn more

NIST SP 800-46 Rev. 2: Guide to Enterprise Telework, Remote Access, and BYOD Security

CISSP: Certified Information Systems Security Professional

AstroTutor

Notes

Readiness

QuestionQ218

Community Discussion