Requirement
Cybersecurity requirements for mobile devices security and BYOD must be defined, documented and approved.
Control Implementation Guidelines
- Develop and document Cybersecurity policy for mobile devices and BYOD in the organization, including the following:
- Mobile Devices Cybersecurity Requirements
- BYOD Cybersecurity Requirements
- Support the organization's policy by the Executive Management. This must be done through the approval of the organization head or his/her deputy
Relevant Cybersecurity Tools
- Workstations, Mobile Devices and BYOD Security Policy Template
Expected Deliverables
- Cybersecurity policy and standard for mobile devices and personal devices (BYOD) at the organization (e.g., electronic copy or official hard copy)
- Formal approval by the head of the organization or his/her deputy on the policy and technical standard (e.g., via the organization's official e-mail, paper or electronic signature)
