Câu 117: IIA-CIA-PART3: Certified Internal Auditor - Part 3 Business Analysis and Information Technology

An organization has instituted a bring-your-own-device (BYOD) work environment. Which of the following policies best addresses the increased risk to the organization's network incurred by this environment?

1. A. Limit the use of the employee devices for personal use to mitigate the risk of exposure to organizational data.
2. B. Ensure that relevant access to key applications is strictly controlled through an approval and review process.
3. C. Institute detection and authentication controls for all devices used for network connectivity and data storage. — đáp án hiện tại
4. D. Use management software to scan and then prompt patch reminders when devices connect to the network.