Question

An IS auditor is reviewing a bring-your-own-device (BYOD) program in which employees access corporate email and documents from personal smartphones. Management's primary concern is protecting confidential corporate data if a device is lost or the employee leaves the company, without infringing on personal data such as family photos. Which control BEST addresses this concern?

Accepted Answer

Containerization that isolates corporate data and allows selective remote wipe

Answer

Full-device encryption enforced on every enrolled personal device

Answer

A signed acceptable-use policy acknowledging the employee's data protection responsibilities

Answer

Requiring a complex device passcode with automatic lockout after failed attempts