USAID's Chief Information Officer Conduct a risk-assessment for Agency staff using personal devices to access the external cloud system and determine what actions Agency officials need to take to mitigate any identified risks. This includes updating relevant policies to reflect the acceptable use of personal devices consistently as deemed appropriate by management and providing training to staff on those new policies.