Q&As

How do I develop a bring your own device (BYOD) policy?

read titleRead full title
Published on LexisPSL on 04/12/2013

The following Information Law Q&A provides comprehensive and up to date legal information covering:

  • How do I develop a bring your own device (BYOD) policy?
  • Focus on the policy objective—protecting company information
  • Define who is covered by the policy
  • Specify the devices covered by the policy
  • Adapt depending on how company systems are accessed
  • Encourage users to separate their data from company information
  • Be clear on what will happen if the device is lost or stolen or users stop working for the company
  • Consider who is responsible for costs and support

How do I develop a bring your own device (BYOD) policy?

Focus on the policy objective—protecting company information

The objective of a BYOD policy should be to ensure company information is adequately protected, while facilitating more flexible working by users. Any security measures adopted by the company as part of BYOD should only go so far as is necessary to achieve this objective and be proportionate, considering individuals' personal privacy.

Define who is covered by the policy

Limit BYOD to those users who it is desirable to allow to work in this way, eg allowing suppliers/partners/customers to connect to the company network using their own devices adds complexity and potentially increases risk. Give BYOD users access only to the specific company IT systems they need to use in this way, rather than the entire company network.

Specify the devices covered by the policy

Detail the relevant technical specifications for devices that can be used under BYOD. Outline any procedure for registering devices and implementing any security measures required before devices can be used to connect to work systems. Blacklist any non-permitted apps or activities (eg 'jailbreaking') that may interfere with functionality of company IT systems or pose a security risk.

Adapt depending on how

Related documents:

Popular documents