An organization is implementing a COPE mobile device management policy. Which of the following should the organization include in the COPE policy? (Choose two.)

COPE (Corporate-Owned, Personally-Enabled) policies allow employees to use company-provided devices for both work and personal activities. To protect organizational data on such devices, remote wiping of the device is crucial. This allows IT to erase all data if the device is lost, stolen, or an employee leaves the company, preventing unauthorized access to sensitive information. Similarly, data encryption is essential to protect data at rest on the device, rendering it unreadable to unauthorized individuals even if the device is compromised. While requiring strong passwords (like "Requiring passwords with eight characters") is a good security practice, it's a general security control rather than a specific COPE policy element. Data usage caps and personal application store access are more related to cost management or user experience, not core data security in a COPE model. Employee data ownership contradicts the corporate ownership aspect of COPE.