CGEIT · Question #389
An IT risk committee is trying to mitigate the risk associated with a newly implemented bring your own device (BYOD) policy and supporting mobile device management (MDM) tools. Which of the…
The correct answer is A. Require staff to complete security awareness training. The most effective way to ensure employees understand how to protect sensitive corporate data on their mobile devices under a new BYOD policy is by mandating security awareness training. This active educational approach provides practical guidance and best practices.
Question
An IT risk committee is trying to mitigate the risk associated with a newly implemented bring your own device (BYOD) policy and supporting mobile device management (MDM) tools. Which of the following would be the BEST way to ensure employees understand how to protect sensitive corporate data on their mobile devices?
Options
- ARequire staff to complete security awareness training
- BDevelop security procedures for mobile devices.
- CDistribute the BYOD policy on the company Intranet.
- DRequire staff to review and sign nondisclosure agreements (NDAs)
How the community answered
(45 responses)- A71% (32)
- B7% (3)
- C18% (8)
- D4% (2)
Why each option
The most effective way to ensure employees understand how to protect sensitive corporate data on their mobile devices under a new BYOD policy is by mandating security awareness training. This active educational approach provides practical guidance and best practices.
Security awareness training is the most effective method for ensuring employees understand how to protect sensitive corporate data on mobile devices. It actively educates users on the risks, policies, and practical steps they need to take, translating abstract policies into actionable knowledge and habits.
Developing security procedures is crucial, but merely having procedures does not guarantee that employees will understand or follow them without proper training.
Distributing the BYOD policy on the Intranet provides access to the policy but does not ensure comprehension or active application of its security principles by employees.
Nondisclosure agreements establish legal obligations but do not educate employees on the technical or procedural aspects of how to protect data on mobile devices.
Concept tested: Mitigating BYOD risk through security awareness
Source: https://learn.microsoft.com/en-us/training/modules/introduction-to-security-privacy-compliance/6-security-awareness
Topics
Community Discussion
No community discussion yet for this question.