CGEIT · Question #426
Which of the following should be the FIRST step for executive management to take in communicating what is considered acceptable use with regard to personally owned devices for company business?
The correct answer is B. Develop and disseminate an applicable policy. The first step in communicating acceptable use for personally owned devices (BYOD) is to establish clear guidelines by developing and disseminating a formal policy. This policy defines the rules and expectations for device usage in a business context.
Question
Which of the following should be the FIRST step for executive management to take in communicating what is considered acceptable use with regard to personally owned devices for company business?
Options
- ARequire employees to read and sign a disclaimer.
- BDevelop and disseminate an applicable policy.
- CPost awareness messages throughout the facility.
- DProvide training on how to protect data on personal devices.
How the community answered
(41 responses)- A15% (6)
- B76% (31)
- C2% (1)
- D7% (3)
Why each option
The first step in communicating acceptable use for personally owned devices (BYOD) is to establish clear guidelines by developing and disseminating a formal policy. This policy defines the rules and expectations for device usage in a business context.
Requiring signatures on a disclaimer is an enforcement and acknowledgement step that occurs after the policy has been developed and disseminated.
Before any other action, executive management must formally define what constitutes acceptable use through a comprehensive policy. This policy serves as the authoritative document outlining rules, responsibilities, and consequences, which then informs all subsequent communication, training, and enforcement efforts.
Posting awareness messages is a communication strategy, but it requires an underlying policy to provide content and authority.
Providing training is a crucial step for education, but it can only effectively occur once the official policy that defines the scope and requirements is in place.
Concept tested: IT policy development and communication
Topics
Community Discussion
No community discussion yet for this question.