Certified Information Security Manager (CISM) — Question 573

Prior to implementing a bring your own device (BYOD) program, it is MOST important to:

Answer options

• A. review currently utilized applications.
• B. survey employees for requested applications.
• C. select mobile device management (MDM) software.
• D. develop an acceptable use policy.

Correct answer: D

Explanation

Developing an acceptable use policy is crucial as it outlines the rules and guidelines for employees using their personal devices at work, ensuring security and compliance. While reviewing applications, surveying employees, and selecting MDM software are also important steps, they should follow the establishment of a clear policy to govern device usage.