ISC2 Systems Security Certified Practitioner (SSCP) Practice Question

An effective way to prevent personal devices from entering a high-security area is to adopt a Bring Your Own Device (BYOD) or acceptable use policy that explicitly forbids carrying personally owned electronics into that area and requires they be stored in controlled lockers nearby. This administrative control is preventive-it sets clear rules and provides a practical mechanism (secure storage) that removes the devices before entry, eliminating cameras and radios inside the lab.

Mobile device management focuses on technical malware controls and does not stop photography or radio transmission once the phone is inside. Additional CCTV is only detective; it may record violations but does not prevent them. Requiring periodic confidentiality agreements is primarily a deterrent and does not physically keep devices out of the lab. Therefore, implementing and enforcing a no-devices-in-lab BYOD policy with secure lockers most directly addresses management's concern.