Exam CISM topic 1 question 12 discussion

The ability to centrally manage devices, allows to locate the device and secure it's content immediately (wipe or encrypt data...)

It's a tricky thing with BYOD, but you must be capable of remote wiping a device if it is "lost" because it's not a company device. This trade off becomes complicated in terms of liability and wiping someone's personal info from their device. What if a rogue IT person maliciously wipes a device? For those advocating for A - locating a device tells you where it is, but it doesn't secure the data on it. The data remains vulnerable until further action is taken. Hence, enterprise data security take priority over personal data loss.

B is right because locating the device is not as important as ability to manage it remotely when it is lost.

Centrally managing devices in a BYOD program allows the organization to enforce security policies, apply updates, monitor compliance, and take action in case of a security incident. This includes the ability to remotely wipe or disable devices to prevent unauthorized access to company data in the event of a loss or theft. While the ability to remotely locate devices (option A), the ability to restrict unapproved applications (option C), and the ability to classify types of devices (option D) are also important considerations, central management provides a comprehensive and proactive approach to maintaining control over devices and ensuring the security of company data on those devices.

it says in the "event of a data loss". should not it be the ability to remote wipe?

B. The ability to centrally manage devices......that's were tools like MDM (Mobile Device Management) or VDI (Virtual Desktop Infrastructure) come to play.

You cannot centrally manage employees personal devices. First and foremost you must classify, then provide guidance for each class.

B. The ability to centrally manage devices

B. The ability to centrally manage devices

B cannot be the answer as it's unacceptable to control or manage a BYOD as it's a personal non-corporate device.

Can't do A, C, and D effectively without B.

Remote wipe in my opinion