Skip to content

ACCA Strategic Professional · Strategic Business Leader · IT systems security and control

Meridian Bank allows staff to use personal smartphones to access email and client files. Which risk is most directly increased by this bring-your-own-device policy?

BYOD most directly raises the risk of confidential data loss. Personal phones can be lost, carry unvetted apps and sit outside the bank's configuration control, making uniform security enforcement harder. Mitigation includes mobile device management, encryption and remote wipe rather than assuming personal devices are safer.

  1. ALoss of data confidentiality through lost devices, unmanaged apps and weaker control over configurationCorrect
  2. BReduced exposure to malware because personal devices are updated more often
  3. CElimination of the need for access controls on client files
  4. DImproved ability to enforce uniform security standards

Explanation

Personal devices are outside the firm's configuration control, can be lost or shared, and may run unvetted apps, which threatens confidentiality. The other options claim reduced risk or better uniform control, which is the opposite of the BYOD effect.

Did you get it right without looking?

One question tells you little. A timed set on IT systems security and control shows your real accuracy, how long you take and where you lose marks.

Practise IT systems security and controlFree diagnostic mock

More IT systems security and control questions