Personal Device Use (BYOD) Policies
Rules for allowing the use of personal devices
BYOD, or bring your own device, policies establish the conditions under which an employee can use their personal phone or computer to access corporate resources, defining minimum security requirements such as active encryption, PIN locking and installing a management profile that separates and protects company data. This matters in practice because BYOD reduces hardware costs for the organization and improves employee convenience, but introduces the risk of corporate data living on a device the company doesn't fully control and that can be lost, sold or infected with malicious apps without IT's knowledge. An important nuance is that a well-designed BYOD policy never gives the company full control over the device, but applies limited management only to the corporate data container, respecting the privacy of the employee's personal information.