Question: IT and Data Management Decisions
1. Managers need to determine how much their companies need to invest in cybersecurity to meet their legal obligations. Since there is no such thing as perfect security (i.e., there is always more that you can do), some degree of risk will remain.
a. When are a company's security measures sufficient to comply with its obligations? For example, does installing a firewall and using virus detection software satisfy a company's legal obligations?
b. Assume your company has implemented a BYOD solution. Does your company have to encrypt all data that is accessible on employees own devices?