ISC2 Certified in Cybersecurity (CC)Security OperationsMedium
An organization is implementing a new BYOD (Bring Your Own Device) policy. To ensure that sensitive company data accessed on personal devices remains protected even if the device is lost or stolen, they need a mechanism to remotely erase corporate data without affecting personal data. Which data handling practice is most relevant here?
- AData retention
- BData classification
- CSecure disposal
- DRemote wipe
Show answer & explanationAnswer & explanation
Correct answer: D. Remote wipe
Remote wipe is a critical data handling capability for BYOD environments, allowing an organization to selectively erase corporate data from a lost or stolen personal device without impacting the user's personal files.
Why the other options are wrong
- A. Data retention defines how long data is kept, not how it's securely removed from a device.
- B. Data classification categorizes data by sensitivity, but doesn't provide a method for remote erasure.
- C. Secure disposal refers to the permanent destruction of data on storage media, typically when devices are decommissioned, not a selective remote erase.
Remote Wipe
A security feature that allows an administrator to remotely delete data from a lost, stolen, or decommissioned device.
- Crucial for BYOD security.
- Can be full or selective (corporate data only).
- Prevents unauthorized access to sensitive data.
Memory trick: Lost phone? Zap the data, not the memories.