A company has issued a new mobile device policy permitting BYOD and company-issued devices. The company-issued device has a managed middleware client

that restricts the applications allowed on company devices and provides those that are approved. The middleware client provides configuration standardization for
both company owned and BYOD to secure data and communication to the device according to industry best practices. The policy states that, “BYOD clients must
meet the company’s infrastructure requirements to permit a connection.” The company also issues a memorandum separate from the policy, which provides
instructions for the purchase, installation, and use of the middleware client on BYOD. Which of the following is being described?

A.
Asset management

B.
IT governance

C.
Change management

D.
Transference of risk