Dangers of BYOD Bring your own device (BYOD) policies are becoming common in most workplaces because employees want to stay in touch using their smartphones, and companies save resources by not having to provide technology to all employees. However, this trend is not without risk. Nearly half of Generation Y employees admit that they don't follow corporate security guidelines, and over 10 percent wouldn't report an incident involving their device being compromised. Think about all of the photos, messages, and other data you might store on your personal mobile phone or tablet. If your employer enforces strict procedures when employees terminate their employment, you might find that your device has been wiped clean, and all of your personal data is lost when you leave the company; to protect company data, some firms do just that. It sounds like a harsh solution, but what's a company to do? Here are some issues to consider as managers create policies to deal with the BYOD trend: - Are employees' personal devices as secure as office-based equipment? - How can companies protect corporate data when employees can access it from mobile devices? - Are there procedures in place to promptly and effectively address breaches from mobile devices? - Has the company established a protocol to wipe a compromised device clean of all data files? - What controls are in place to manage employees' use of apps to protect against malware and other attacks? Setting up security measures to restrict access to sensitive company data from mobile devices, training employees in data security procedures, and coordinating between HR and IT personnel when employees terminate their employment are critical steps for protecting vital data resources. Ensuring that employees understand the implications of using their own devices to access company data can prevent loss of personal data. 69 Consider the advantages and disadvantages of allowing employees to bring their own devices to work and answer the following questions: 1. How can companies encourage employees to report when their devices are compromised? How could HR departments assist with these efforts? 2. What is your opinion on using your own mobile phone or tablet to perform your job duties