Certified in the Governance of Enterprise IT (CGEIT) — Question 26

The CIO of a global technology company is considering introducing a bring your own device (BYOD) program. What should the CIO do FIRST?

Answer options

• A. Ensure the infrastructure can meet BYOD requirements.
• B. Define a clear and inclusive BYOD policy.
• C. Establish a business case.
• D. Focus on securing data and access to data.

Correct answer: C

Explanation

The first step in launching a BYOD program is to establish a business case, as it provides the rationale and justification for the initiative. Without a solid business case, other aspects such as policy development, infrastructure readiness, and security measures may lack direction or support. Therefore, while ensuring infrastructure and policies are important, they should follow the establishment of a clear business case.