An organization plans to allow employees to use their own devices on the organization-s network. Which of the following is the information security manager-s BEST course of action?

A. Implement automated software

B. Assess associated risk

C. Conduct awareness training

D. Update the security policy