What security risks are associated with BYOD, and how can they be mitigated?

• A. BYOD eliminates all security concerns.
• B. Risks include data leakage and unmanaged devices; mitigate with MDM, encryption, and clear BYOD policies.
• C. BYOD passwords must be changed weekly.
• D. BYOD has no impact on network security.

Answer: (B)

BYOD introduces security risks because personal devices used for work can store, access, or transmit corporate data outside the company’s control. Data can leak through personal apps, cloud backups, or shared devices, and lost or stolen phones can expose sensitive information. The strongest mitigation combines three elements: control, protection, and policy. Mobile Device Management helps enforce security settings, track devices, and enable remote wipe if a device is lost or stolen. Encryption protects data at rest so that even if the device is compromised, the information remains unreadable. A clear BYOD policy sets expectations for which devices are allowed, how corporate data should be handled, what security controls must be in place, and the process for incident response. Together, these approaches reduce the risk of data leakage and maintain some level of control over unmanaged personal devices.

The other options miss important realities: BYOD will not eliminate security concerns, making the claim inaccurate; requiring weekly password changes is not a standard, practical BYOD-specific mitigator; and saying BYOD has no impact on network security ignores how personal devices can become entry points or bypass controls if not properly managed.