The technology steering committee is struggling with increased requirements stemming from an increase in telecommuting. The organization has not addressed telecommuting in the past. The implementation of a new SSL-VPN and a VOIP phone solution enables personnel to work from remote locations with corporate assets. Which of the following steps must the committee take FIRST to outline senior management’s directives?
A . Develop an information classification scheme that will properly secure data on corporate systems.
B . Implement database views and constrained interfaces so remote users will be unable to access PII from personal equipment.
C . Publish a policy that addresses the security requirements for working remotely with company equipment.
D . Work with mid-level managers to identify and document the proper procedures for telecommuting.
Answer: C