That's when you call CISO in, so they can tell: "No. By our corporate policy, any device not approved by the local IT department is not allowed on our network"

That's when you call CISO in, so they can tell: "No. By our corporate policy, any device not approved by the local IT department is not allowed on our network" That's one of the biggest roles of the CISO, and that's why their rank is so high despite often having much fewer direct reports than other CxO's - so they can stop crazy stuff from happening, even if it comes from high-ranking people.