The technology steering committee is struggling with increased requirements stemming from an increase in
telecommuting. The organization has not addressed telecommuting in the past. The implementation of a new
SSL-VPN and a VOIP phone solution enables personnel to work from remote locations with corporate assets.
Which of the following steps must the committee take FIRST to outline senior management’s directives?
A.
Develop an information classification scheme that will properly secure data on corporate systems.
B.
Implement database views and constrained interfaces so remote users will be unable to access PII from
personal equipment.
C.
Publish a policy that addresses the security requirements for working remotely with company equipment.
D.
Work with mid-level managers to identify and document the proper procedures for telecommuting.