A snapshot analysis of publicly available BYOD policies

Abstract

Bring your own device (BYOD) is the practice of bringing an individual’s own technology into the organisation for use in that environment. BYOD has become more commonplace in 2020 as a result of the COVID19 pandemic, as employees work from home, often with their own equipment. This practice has brought with it both advantages and risks. The exposure of remnant data on inappropriately sanitised devices can represent a data breach and have significant impact on both the individual and the organisation. Disturbingly, there has been consistent increases in the number of devices being found on public platforms containing such data. The potential impact to organisations is only heightened in a predominant work-from-home (WFH) environment. This study analysed a ‘snapshot’ of a sample of publicly available BYOD policies to determine if the documents were adequately addressing the issue of BYODs reaching end of life; being discarded, sold, stolen or a combination of these. The findings from the research show a majority of publicly available BYODs do not address this critical issue.