There is an increasing trend for organisations to allow staff to bring in their own device to work and to use it for business purposes.
In a similar way to social media, bringing devices into work can have both a positive and a negative impact on a business and, in particular, it raises specific questions including:
- does the employee's own device have virus protection and is it up to date? If not they could introduce a virus to the business systems;
- will any of the business' data be stored on an employee's device? If so, there are serious security issues relating to data protection;
- if data is stored on own devices, is it encrypted? The loss of data is something often highlighted in the press and can have a devastating effect on any organisation;
- does the employee’s family also use the device and, if so, are there separate log-ons for each member of the family?
- How will you govern the use of social media networks during working hours?
How do you the manage the risks of own devices?
The best way to manage the risks of bringing in own devices is to have a policy which sets out clear guidelines for their use.
A policy should include at least the following points:
- details of the minimum levels of virus protection expected;
- guidance on who is allowed to bring in their own device;
- an emphasis on data security including password protection and data encryption;
- guidelines on the use of the device for personal reasons during working hours.
To discuss drafting a policy to protect your business, contact a member of our team.