Can staff use their personal devices for work?
For limited, low-risk tasks, if you set rules; but personal devices should not join the company VPN or hold company files outside managed apps. The company cannot see whether a personal phone or laptop is updated, encrypted or infected, and cannot wipe it when the person leaves. A common middle ground: allow e-mail and chat on personal phones through managed apps with a PIN and remote wipe of the company data only, allow browser access to the cloud office with multi-factor authentication, and keep everything that needs access to internal systems on company devices. Write the rules down, including what happens to company data when someone leaves, and agree them with your works council where there is one. On the network, a personal device that connects to a monitored segment appears on the NetSenX network map, and scanning, beaconing or unusual outbound volume from it is flagged on every plan.
Read next
Related questions
- What should we do when a work laptop is lost or stolen?
- Can my employer see my traffic when I use the company VPN?
- Is it safe to use a personal VPN app on a work computer?
- Is a remote-desktop app that staff installed on an office PC a risk?
- How do we find remote-desktop apps installed without permission?
← All 40 questions on Remote work and exposed servicesAll topics