MENU
Following a risk assessment, an organization has made the decision to adopt a bring your own device (BYOD) strategy. What should the information security manager do NEXT?
Suggested Answer: D
Get Premium CISM Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
Defining control requirements is the next step to ensure the security policy framework encompasses the new business model because it is a process of identifying and specifying the security measures and standards that are needed to protect the data and applications accessed by the BYOD devices. Defining control requirements helps to establish the baseline security level and expectations for the BYOD strategy, as well as to align them with the business objectives and risks. Therefore, defining control requirements is the correct answer.
https://www.digitalguardian.com/blog/ultimate-guide-byod-security-overcoming-challenges-creating-effective-policies-and-mitigating
https://learn.microsoft.com/en-us/mem/intune/fundamentals/byod-technology-decisions
39 comments · newest first
CH
Chun
10 months ago
Wait, are people really okay with using their personal devices for work?
YU
Yun
11 months ago
Control requirements are crucial, but not sure if they should be first.
LU
Lucille
11 months ago
Training for BYOD awareness is super important too!
CL
Claribel
11 months ago
I think implementing MDM should come before anything else.
LA
Lashonda
11 months ago
Definitely need a personal device policy first!
MA
Mauricio
12 months ago
I vaguely recall that defining control requirements is crucial, but I can't remember if it comes before or after the policy development.
GW
Gwenn
12 months ago
Developing training for BYOD awareness sounds important, but I feel like we need to establish some controls first.
MA
Malissa
12 months ago
I remember a practice question where we had to implement MDM right after deciding on BYOD. Maybe that's what we should do next?
EM
Emilio
1 year ago
I think the first step should be developing a personal device policy, but I'm not entirely sure if that's the best starting point.
YU
Yuette
1 year ago
Developing BYOD awareness training for employees is crucial, so I'm leaning towards option C. But I also need to consider the other options to make sure I choose the best next step.
FL
Fletcher
1 year ago
Okay, I've got this. The key here is to establish clear guidelines and controls for the BYOD strategy. I'll go with option D - defining the control requirements.
SA
Salina
1 year ago
Hmm, I'm a bit unsure about this one. Should I focus on developing a policy, implementing MDM, or defining control requirements? I'll need to think this through carefully.
BR
Brynn
1 year ago
This seems like a straightforward question about BYOD implementation. I think I'll go with option B - implementing an MDM solution to manage the personal devices.
RE
Remona
1 year ago
Hmm, I'm a bit confused by the wording here. I'll need to make sure I understand the difference between voice ports and dial-out ports.
OL
Oliva
2 years ago
What, no option for 'hide under the desk and hope it goes away'? That's my personal device policy!
TY
Ty
2 years ago
C) Develop training specific to BYOD awareness
IS
Isidra
2 years ago
B) Implement a mobile device management (MDM) solution
AN
Annamae
2 years ago
C) Develop training specific to BYOD awareness
LA
Latosha
2 years ago
B) Implement a mobile device management (MDM) solution
NI
Nidia
2 years ago
A) Develop a personal device policy
LI
Lili
2 years ago
A) Develop a personal device policy
KE
Keneth
2 years ago
Defining control requirements is key. Gotta set those boundaries and guidelines for BYOD, you know?
KA
Kati
2 years ago
D) Define control requirements
TA
Tamala
2 years ago
C) Develop training specific to BYOD awareness
LU
Luisa
2 years ago
B) Implement a mobile device management (MDM) solution
AL
Alex
2 years ago
A) Develop a personal device policy
AI
Aimee
2 years ago
I think implementing a mobile device management solution would be more effective in managing security risks.
ME
Melissia
2 years ago
BYOD awareness training is crucial. Gotta make sure everyone knows how to use their devices securely, am I right?
SA
Salley
2 years ago
B) Implement a mobile device management (MDM) solution
WE
Weldon
2 years ago
C) Develop training specific to BYOD awareness
CA
Caprice
2 years ago
A) Develop a personal device policy
CO
Colton
2 years ago
I agree with Lashawn. It's important to have clear guidelines in place.
CA
Carli
2 years ago
Implementing an MDM solution sounds like a good next step to me. It'll help manage all those personal devices on the network.
NA
Nadine
2 years ago
I think the information security manager should develop a personal device policy first. It's the foundation for BYOD implementation.
OM
Omega
2 years ago
D) Define control requirements
RI
Rikki
2 years ago
C) Develop training specific to BYOD awareness
IR
Ira
2 years ago
B) Implement a mobile device management (MDM) solution
RE
Remedios
2 years ago
A) Develop a personal device policy
LA
Lashawn
2 years ago
I think we should develop a personal device policy first.