An organization is concerned with the risk of information leakage caused by incorrect use of personally owned smart devices by employees. What is the BEST way for the information security manager to mitigate the associated risk?

A. Require employees to sign a nondisclosure agreement (NDA).
B. Implement a mobile device management (MDM) solution.
C. Document a bring-your-own-device (BYOD) policy.
D. Implement a multi-factor authentication (MFA) solution.