An organization is considering allowing users to connect personal devices to the corporate network. Which of the following should be done FIRST?

A. Configure users on the mobile device management solution.
B. Create inventory records of personal devices.
C. Implement an acceptable use policy.
D. Conduct security awareness training.