A health service provider is considering the impact of allowing doctors and nurses access to the internal email
system from their personal smartphones. The Information Security Officer (ISO) has received a technical
document from the security administrator explaining that the current email system is capable of enforcing
security policies to personal smartphones, including screen lockout and mandatory PINs. Additionally, the
system is able to remotely wipe a phone if reported lost or stolen. Which of the following should the Information
Security Officer be MOST concerned with based on this scenario? (Select THREE).
A.
The email system may become unavailable due to overload.
B.
Compliance may not be supported by all smartphones.
C.
Equipment loss, theft, and data leakage.
D.
Smartphone radios can interfere with health equipment.
E.
Data usage cost could significantly increase.
F.
Not all smartphones natively support encryption.
G.
Smartphones may be used as rogue access points.