Which of the following is the BEST way to reduce the risk associated with a bring your own device (BYOD) program?

Question

Options

• AImplement a mobile device policy and standard.
• BProvide employee training on secure mobile device practices.
• CImplement a mobile device management (MDM) solution.
• DRequire employees to install an effective anti-malware app.

• A
  8% (3)
• B
  18% (7)
• C
  70% (28)
• D
  5% (2)

Explanation

A Mobile Device Management (MDM) solution (C) is the BEST control for reducing BYOD risk because it provides centralized technical enforcement of security policies across personal devices accessing corporate resources. MDM enables capabilities such as remote wipe, device encryption enforcement, containerization of corporate data, certificate-based authentication, compliance checking, and application management - all of which directly reduce the primary risks associated with BYOD. Option A (a mobile device policy and standard) establishes governance but without technical enforcement, compliance is not guaranteed. Option B (employee training) raises awareness but relies entirely on voluntary user behavior and cannot enforce controls. Option D (requiring anti-malware apps) is a single-point control that addresses only malware risk and cannot be enforced or verified without an MDM solution. MDM provides the broadest technical coverage and enforcement capability, making it the most effective BYOD risk reduction control.

No community discussion yet for this question.