Which action would violate Piedmont's BYOD policy?

• A. Store company data on a personal device
• B. Use a personal device with approved security controls to access company resources
• C. Comply with IT guidelines
• D. Use company-provided device

Answer: (A)

BYOD policies revolve around keeping corporate data within a controlled environment even when employees use personal devices. Storing company data on a personal device creates a data-at-risk surface: the device could be lost or stolen, it may lack encryption or proper security controls, and backups or syncing could expose the data to unauthorized access. Because of these risks, placing corporate data directly on a personal device would violate the policy.

The other actions fit typical BYOD expectations: using a personal device to access company resources only when it has approved security controls helps protect data; complying with IT guidelines is how the policy is meant to be followed; and using a company-provided device is not a BYOD scenario and is generally allowed under the policy.