An organization has an established bring-your-own-device policy. Due to this policy, which of the following privacy risks would be most relevant to the organization?
A.
Employees who consider updates of software or operating systems degrading to the performance of their devices might choose not to install the updates.
B.
Confidential intellectual property of the organization may be compromised if the smart device is physically lost.
C.
Concern by employees that the organization could intrusively monitor them through their smart devices.
D.
Malware may infect smart devices that contain the organization ' s confidential data if the device does not have adequate security restrictions.
In a bring-your-own-device environment, employees use personally owned devices for work activities. The most relevant privacy risk is that employees may believe the organization can intrusively monitor personal information, location data, browsing activity, personal applications, photos, or communications on their devices. Option B is a confidentiality and intellectual property risk, not the best privacy risk. Option A is a patching and security compliance risk. Option D is a malware and information security risk. Internal audit should verify that BYOD policies clearly define monitoring scope, employee consent, data separation, remote wipe rights, privacy protections, and acceptable use. Privacy risk is strongest when personal and business data coexist on the same device and monitoring controls are not transparent.
Contribute your Thoughts:
Chosen Answer:
This is a voting comment (?). You can switch to a simple comment. It is better to Upvote an existing comment if you don't have anything to add.
Submit