Users were having too much trouble completing their assignments, so they decided to install their own software and hardware into the organization without approval from the configuration and change management board. What is the primary reason for the CISO deploying an AUP to stop these practices?

Domain 7: Security Operations Practice Questions 
Questions relating to the following topics are included in this domain: 
Understanding and complying with investigations
Proper logging and monitoring activities
Performing configuration management 
Applying fundamental security concepts
Conducting resource protection and incident management