Which statement is correct regarding a bring$-$your$-$own$-$device $($BYOD$)$ program?

Question $5$ options:

A BYOD program requires all employees must use same devices such as iPhone. No other devices can be used in a BYOD program.

A BYOD program may use a mobile device management system to protect organization information security. It prohibits an employee's data management flexibility in the program.

A user's information security awareness is not important in a BYOD program, because the IT manager can protect the organization's information security from the web service side.

If used properly, a BYOD program can effectively integrate a user's devices into an enterprise information system, thereby saving IT investment for the organization.