The Chief Information Officer (CIO) of a technology company is likely to move away from a deperimeterized model for employee owned devices. This is because there were too many issues
with lack of patching, malware incidents, and data leakage due to lost/stolen devices which did not
have full-disk encryption. The ‘bring your own computing’ approach was originally introduced
because different business units preferred different operating systems and application stacks.
Based on the issues and user needs, which of the following is the BEST recommendation for the
CIO to make?
A.
The de-perimeterized model should be kept as this is major industry trend and other companies
are following this direction. Advise that the issues being faced are standard business as usual
concerns in a modern IT environment.
B.
Update the policy to disallow non-company end-point devices on the corporate network.
Develop security-focused standard operating environments (SOEs) for all required operating
systems and ensure the needs of each business unit are met.
C.
The de-perimeterized model should be kept but update company policies to state that noncompany end-points require full disk encryption, anti-virus software, and regular patching.
D.
Update the policy to disallow non-company end-point devices on the corporate network. Allow
only one type of outsourced SOE to all users as this will be easier to provision, secure, and will
save money on operating costs.