Isaca CGEIT Exam - Topic 5 Question 82 Discussion

Actual exam question for Isaca's CGEIT exam

Question #: 82
Topic #: 5

An enterprise recently approved a bring your own device (BYOD) policy. The IT steering committee has directed IT management to develop a communication plan to disseminate information regarding the associated technical risks. Which of the following is MOST important to include in this communication plan?

AA link on the corporate intranet to the BYOD policy

BPotential exposures and impacts using common terms

CSchedule and content for mandatory training

DDisciplinary actions for violation of the BYOD policy

Show Suggested Answer

Suggested Answer: B

by Gladys at Aug 26, 2024, 01:16 AM

Limited Time Offer

25%

Off

Get Premium CGEIT Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Hillary

3 months ago

Disciplinary actions? Seems harsh for just using personal devices.

upvoted 0 times

...

Lino

3 months ago

Totally agree, training content is key for understanding risks!

upvoted 0 times

...

Venita

3 months ago

Wait, are people really going to read the policy?

upvoted 0 times

...

Cassie

4 months ago

I think a link to the policy is more important.

upvoted 0 times

...

Tonja

4 months ago

Definitely need to explain potential exposures and impacts.

upvoted 0 times

...

Marcos

4 months ago

I keep thinking about the consequences of not following the policy. Option D might be necessary, but I wonder if it’s the most important part of the communication plan.

upvoted 0 times

...

Janae

4 months ago

I practiced a similar question where training was emphasized. I think option C could be crucial for ensuring everyone knows how to handle their devices safely.

upvoted 0 times

...

Beatriz

4 months ago

I'm not entirely sure, but I feel like having a link to the policy is important too. Maybe option A could help employees understand the rules better?

upvoted 0 times

...

Dustin

5 months ago

I remember discussing the importance of clear communication about risks in our last class. I think option B makes the most sense since it addresses potential exposures directly.

upvoted 0 times

...

Oren

5 months ago

I feel pretty confident about this one. The key here is to focus on communicating the technical risks in a way that resonates with the audience, so option B is definitely the way to go. The other choices are important, but not as critical as laying out the potential exposures.

upvoted 0 times

...

James

5 months ago

Okay, for this type of question, I always try to think about what would be most useful and actionable for the end users. In this case, I think clearly explaining the potential exposures and impacts in plain language (option B) is going to be the most impactful approach.

upvoted 0 times

...

Elena

5 months ago

Hmm, I'm a bit unsure about this one. I'm torn between options B and C - I think both the risk information and the training schedule are important to include. Maybe I'll just have to weigh the relative importance of each and make my best judgment call.

upvoted 0 times

...

Kenda

5 months ago

This seems like a straightforward question about the key elements to include in a BYOD communication plan. I think the most important thing is to focus on educating users about the potential risks and impacts, so I'd go with option B.

upvoted 0 times

...

Kirk

5 months ago

I think it might be during the planning stage since that's when you really outline your target audience and goals.

upvoted 0 times

...

Justine

5 months ago

I think the term we're looking for is "policy," but I'm not entirely sure if that's specific enough for scope.

upvoted 0 times

...

Kirk

1 year ago

Hmm, I'd say B. Gotta keep it simple, like explaining cybersecurity to your grandma. No need to get too fancy.

upvoted 0 times

...

Gail

1 year ago

B is the obvious choice. We don't want to scare people with technical jargon, but we need to be clear about the risks.

upvoted 0 times

Pamela

1 year ago

User 4: B) Potential exposures and impacts using common terms

upvoted 0 times

...

Rodolfo

1 year ago

User 3: A) A link on the corporate intranet to the BYOD policy

upvoted 0 times

...

Chuck

1 year ago

C) Schedule and content for mandatory training

upvoted 0 times

...

Ernestine

1 year ago

B) Potential exposures and impacts using common terms

upvoted 0 times

...

Gwen

1 year ago

D, for sure! You need to have some teeth in the policy to make sure people take it seriously.

upvoted 0 times

Inocencia

1 year ago

D) Disciplinary actions for violation of the BYOD policy

upvoted 0 times

...

Pearly

1 year ago

B) Potential exposures and impacts using common terms

upvoted 0 times

...

Isidra

1 year ago

A) A link on the corporate intranet to the BYOD policy

upvoted 0 times

...

Brandon

1 year ago

Ohh, I'd go for C. Mandatory training is key to ensure everyone's on the same page.

upvoted 0 times

...

Francisca

1 year ago

B is the way to go! Gotta communicate the risks in plain language for the non-techies.

upvoted 0 times

Percy

1 year ago

Using common language will help ensure that the information is clear and accessible to all employees.

upvoted 0 times

...

Junita

1 year ago

It's important to make sure everyone is on the same page about the risks.

upvoted 0 times

...

Edna

1 year ago

Agreed, that way everyone can understand the potential impacts.

upvoted 0 times

...

Rikki

1 year ago

We should definitely use common terms to explain the risks.

upvoted 0 times

...

Dorcas

1 year ago

I think we should also include option A, a link on the corporate intranet will make it easily accessible for everyone.

upvoted 0 times

...

Pete

1 year ago

I believe option C is also important, mandatory training will ensure everyone is aware of the policy.

upvoted 0 times

...

Felix

2 years ago

I agree with Avery, potential exposures and impacts using common terms will help employees understand the risks.

upvoted 0 times

...

Avery

2 years ago

I think option B is the most important.

upvoted 0 times

...