Scenario $1$: Helena works remotely and commonly uses the mobile device issued to her to conduct client meetings and access the customer database. She is on the go a lot, and instead of using the secure $4$G network issued by the company, she often uses the open access Wi$-$Fi network wherever a network might be available, such as at a Starbucks.

There is no company policy against the personal use of company mobile devices. She knows it is against company policy to download applications, such as games, that have not been approved by the IT department. She has done this in violation of the policy, but she only plays the games at work.

After reading the Scenario, answer the following questions:

Question $1$:

The company has issued Helena the mobile device to work remotely to interact with clients and access the database. Is this the right thing to do$?$

No$,$ the company should require her to be at her desk inside the firewall.

It is acceptable to do client meetings remotely, but database access has to be secured.

Considering that the company has issued her this device, they expect her to use it remotely provided she follows security procedures.

There is no problem. There is no need to be paranoid.

Question $2$:

Is it all right for Helena to use the company issued mobile device on an open access network that is not password protected?

Absolutely not. Even if she does not access clients and client data, she is possibly exposing the device and the data it contains to other users.

She could be doing personal work, just not access any secure company data.

It is all right if she does it quickly. Keeping the connection open a long time could be risky.

Some people are so paranoid. The only people in Starbucks are coffee lovers, not snoopers.

Question $3$:

Is it all right for Helena to be downloading games that have not been approved by the IT department?

It is quite all right to download the games, but she should not be playing them at work.

There is nothing wrong with downloading the game as long as she is playing within the security firewall.

Everyone needs to relax with games. This is an example of an improper security policy.

It is very wrong for her to disregard the security policy and the IT department. Games can come with spyware or malware. This is the big concern, bigger than her playing games at work.

Scenario $2$: All the answers are given in the scenario. The company has issued Helena a mobile device with a secure $5$G connection. They expect her to work remotely to conduct client meetings and access the company database. She does not need to use public Wi$-$Fi where her device and communications are exposed to other users, who could also overhear her or look over her shoulder. Using the secure $5$G she can connect from any private area, such as inside her parked car.

It is very wrong of her to ignore the company security policy and the IT department with respect to games. The company has not banned games. They only require games to be vetted by the IT department so it is free of spyware and malware that can expose sensitive information.

After reading the Scenario, answer the following questions:

Question $1$:

Which of the following best represents what Helena should do at work?

Focus on work and not play games.

Bring her own phone to play games at work.

It doesn't matter. One or two games will not hurt if she does not play too often.

Have her work phone scanned on a regular basis by the IT department.

Question $2$:

Which of the following best represents what Helena should do when clients urgently request information from her when she is away from work?

Find a secluded location where she can use her secure $5$G connection.

She should not answer the call.

She should answer and give the client a time when she can give the information.

She should only provide general information.