Which of the following would provide the MOST important input during the planning phase for an audit on the implementation of a bring your own device (BYOD) program?
A.
Results of a risk assessment
B.
Policies including BYOD acceptable use statements
C.
Findings from prior audits
D.
An inventory of personal devices to be connected to the corporate network
A. Results of a risk assessment
During the planning phase for an audit on the implementation of a bring your own device (BYOD) program, the most important input would be the results of a risk assessment. This assessment would help identify potential security risks and vulnerabilities associated with allowing personal devices onto the corporate network. Understanding the level of risk involved guides the audit's focus and helps in prioritizing the areas that need to be examined thoroughly.
I'm beginning to think the answer is A. Why: Although policies, including BYOD acceptable use statements, are important, policies themselves are developed based on risk assessments, and the results of risk assessments take precedence. Policies provide implementation guidelines, but understanding the specific risks is essential to developing the right policies.
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
lsiau76
Highly Voted 1 year, 2 months agoJulianleehk
Highly Voted 1 year, 11 months agoPumeza
Most Recent 1 week, 1 day agoLightfinger
1 week, 2 days agoa84n
6 months, 3 weeks ago5b56aae
7 months agoSwallows
7 months, 1 week agoSwallows
4 months agoecho_cert
8 months, 3 weeks agomeelaan
1 year, 1 month agoPakawat
1 year, 6 months agoMunaM
2 years, 2 months ago