Exam CGEIT topic 1 question 411 discussion

C. Educating employees on the increased IT security risk to the enterprise When implementing a newly approved bring your own device (BYOD) policy, the main governance focus should be on educating employees on the increased IT security risk to the enterprise. BYOD policies introduce new challenges and risks to IT security due to the diversity of devices and potential vulnerabilities. Educating employees about these risks, including the importance of password protection, data encryption, secure network connections, and adherence to company policies, is crucial to mitigate potential security threats. Employees need to understand their role in maintaining the security of company data and systems when using their personal devices for work purposes.