ISC2 Certified in Cybersecurity (CC)Security OperationsMedium
An organization is implementing a new bring your own device (BYOD) policy. To mitigate the risk of corporate data residing on personal devices, the security team mandates that all BYOD devices capable of accessing company resources must be enrolled in a Mobile Device Management (MDM) solution. Which security operation is being primarily addressed by this MDM requirement?
- ASecurity Assessments
- BConfiguration Management
- CData Handling
- DAsset Management
Show answer & explanationAnswer & explanation
Correct answer: B. Configuration Management
MDM solutions enforce security configurations and policies on mobile devices. By mandating MDM enrollment, the organization ensures that BYOD devices adhere to corporate security standards, which is a core function of configuration management.
Why the other options are wrong
- A. Security assessments evaluate security, but MDM is about actively managing configurations.
- C. Data handling defines how data is processed, but MDM focuses on device settings for data protection.
- D. Asset management tracks devices but doesn't primarily enforce their security posture.
Configuration Management
The process of establishing and maintaining consistency of a system's performance, functional, and physical attributes with its requirements, design, and operational information throughout its life.
- Ensures systems are configured securely and consistently.
- Prevents configuration drift and unauthorized changes.
- Often involves tools like MDM for mobile devices.
Memory trick: Consistent Configs Control Chaos.