Discuss Isaca CGEIT Exam Topic 3 Question 12

An IT strategy committee has reviewed an audit report indicating sales employees are using personal smartphones to conduct corporate business. Although the committee appreciates the business benefits, it is also concerned with the security risk. To deliver the business benefit, what should be the committee's FIRST recommendation?

ADocument procedures for securing personal devices.

BImprove training courses on securing corporate information.

CPerform a risk assessment on personal device data protection.

DUpdate the corporate security policy to include personal devices.

Suggested Answer: B

Get Premium CGEIT Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

12 comments · newest first

Glendora 11 months ago

Documenting procedures is a good start, but it feels like a band-aid solution.

Cornell 12 months ago

A risk assessment is crucial before anything else, though.

Iluminada 12 months ago

Wait, are they really using personal phones for work? That sounds risky!

Cecily 12 months ago

Agree, but training is super important too!

Patria 1 year ago

I think they should definitely update the corporate security policy first.

Kenny 1 year ago

I practiced a question like this before, and I think documenting procedures is important, but it might be better to assess the risks first. So, I’m torn between A and C.

Helga 1 year ago

I feel like improving training courses could help, but it might not address the immediate security concerns. I’m leaning towards option C for a more thorough approach.

Alpha 1 year ago

I’m not entirely sure, but I remember something about updating security policies being a common first step in similar scenarios. Maybe option D is the way to go?

Olga 1 year ago

I think the first step should be to perform a risk assessment on personal device data protection. It’s crucial to understand the risks before implementing any procedures.

Arlene 1 year ago

I'm a bit confused by the different logging and monitoring options presented here. I'll need to review my notes on cloud networking and security best practices to make the right choice.

Charolette 1 year ago

This looks like a straightforward question on the benefits of employee appraisals. I'll go through each option carefully and select the ones that apply.

Gail 1 year ago

This question seems straightforward. I think the key is to focus on the conditions that would allow the award to be excluded from Kent's gross income.

Isaca CGEIT Exam - Topic 3 Question 12 Discussion