Bring Your Own Device Organisational Information Security and Privacy

BYOD is a growing trend in corporate environments, where employees bring their own devices to work. Factors that have led to the growing popularity of BYOD include the benefits of work flexibility, increased productivity, and efficiency of employees. Despite these benefits, there are concerns over information security and privacy. Since BYOD allows employees to access organisational data anytime anywhere, it is necessary to ensure the confidentiality and integrity of organisational information resources and assets. This paper will review BYOD, and information security and privacy in BYOD environments. Three different cases study organisational practices for BYOD security and privacy. Finally, advice on how to handle security and privacy in BYOD environments, using explicit policies, is presented. The paper will assist organisations, information technology and information security/privacy professionals to understand risks associated with BYOD, and policy development to mitigate them.