As a security analyst, even though it may not relate immediately to your day-to-day job, it’s a best practice to be aware of emerging trends in the industry because they may eventually affect your organization. Think about how fast mobile devices have evolved and become pervasive in both business and personal applications. Managing emerging technologies requires a two-pronged approach: the technological aspect and the social aspect. You might need to upgrade your system, as well as your policies that affect employee behaviors. There is often no right or wrong answer when integrating emerging technologies as long as the technology isn’t detrimental to your system; however, following best practices as defined by the industry, staying current with trade publications, and networking with your peers will help you be successful. As you address the technological and policy-related updates of implementing emerging technology in your organization, it is important to think about what it means to use the technology and adhere to the policies you are updating. Using a systems thinking approach can help with this.
You are a cybersecurity analyst and your organization has noticed a new trend. More and more employees are bringing their personal devices to work and connecting them to the company wifi. The security team has recognized this as an issue and has decided to create a new segmented network for employees to use for their personal devices. This is a more secure solution because it separates data traffic for personal use and it allows the organization to encrypt the communication. This benefits both the employees who want to use their personal devices at work and the organization.
This change to the system includes two steps from two different teams. The IT team is going to build the isolated secure network for employees only, and the security team needs to update the bring your own device (BYOD) policy. Your manager has asked you to draft the update to this policy. Your requirement is to update the policy to reflect the changes in the system in response to this new initiative.
Review your organization’s current BYOD policy (the Module Six Activity document) linked in the Activity task in Module Six of your course. You must address the critical elements listed below.
Modify the BYOD policy to meet the new requirement from the emerging workplace trend.
Describe the impacts of this policy update on the organizational culture. For example, if you are aware that your use of personal devices on the company network is being monitored, would this change your behavior? Should it?
From a systems thinking approach, recommend at least one additional policy update. Justify your recommendation.