Which statement best reflects Piedmont's BYOD policy?

• A. BYOD is strictly prohibited.
• B. BYOD may be allowed with approved security controls; avoid storing company data on personal devices; compliance with IT guidelines.
• C. Personal devices may store company data if encrypted.
• D. There are no BYOD guidelines.

Answer: (B)

BYOD policies balance allowing personal devices for work with protecting company data. The best statement reflects that BYOD may be allowed if devices meet approved security controls and employees avoid storing company data on personal devices, while complying with IT guidelines. In practice, this means devices may need to enroll in management tools, use strong authentication, encryption, remote wipe, and VPN access, and employees must follow data-handling rules. The other options are too restrictive or unsafe: prohibiting BYOD entirely ignores reasonable controls; encryption alone on personal devices doesn’t address data handling and policy compliance; and having no guidelines leaves data at risk.