Byod

STRATEGIC GUIDE TO

(The Bring-Your-Own-Device Phenomenon) Eight Things CIOs Need to Know The Legal Challenges Addressing Mobile Security BYOD’s Hidden Costs How to Write the Policy
FROM THE EDITORS OF

BYOD

A STRATEGIC GUIDE FROM THE EDITORS OF CIO

Table of Contents Adapted from articles published at CIO.com BYOD: Eight Things CIOs Need to Know [page 3] Security: Secure BYOD atMasterCard? Priceless. [page 9] Legal Affairs: BYOD Stirs Up Legal Challenges [page 12] The Hidden Costs of BYOD [page 13] How to Establish a Solid BYOD Policy [page 16] BYOD, But Don’t Drop It [page 18]

EDITOR’S NOTE Bring It On
Of course, BYOD doesn’t just mean “bring your own device,” like a beer at a picnic. It really means employees are allowed to connect devices that they already own (likesmartphones and tablets) to the corporate network to get work done. It may have started with some “digital natives” bringing their iPhones to the office, or, just as likely, with the CEO bringing in the iPad he got as a gift. Either way, CIOs have to determine how to deal with this phenomenon. Whereas CIOs historically have been control freaks—providing the specific devices that could get hooked upto the network—now they have to figure out how to say “Yes, but,” as in, “Yes you can hook that thing up, but here are the rules of the road.” Only about one-third of CIOs are actually allowing BYOD at the moment, but is there any doubt this will become even more common in the future? It’s time to figure out your policies about who owns and pays for what, and how to make sure corporate data isn’tcompromised. This report is intended to help guide you along the way.

Editorial Editor Mitch Betts mbetts@cio.com Contributors Kim S. Nash Tom Kaneshige Jonathan Hassell Editorial Management Brian Carlson Maryfran Johnson Dan Muse Image Credits
Scanrail/Fotolia [cover] iQoncept/Fotolia [page 3] Zimmytws/Fotolia [page 12] Atlantis/Fotolia [page 13] iQoncept/Fotolia [page 17]

Copyright 2012CXO Media Inc. 492 Old Connecticut Path, P.O. Box 9280, Framingham, MA 01701

Mitch Betts
[2] cio.com BYOD | 2012

A STRATEGIC GUIDE FROM THE EDITORS OF CIO

BYOD: Eight Things CIOs Need to Know
[3] cio.com

BYOD, or bring your own device, is more than code for “my CEO bought an iPad.” BYOD refers to a strategy for letting employees choose and purchase the devices they want to use to dotheir jobs— everything from PCs and laptops to smartphones and tablets. The machines belong to the employees, who take them along with them if they leave the company. CIOs who enact BYOD policies are plowing new ground in the consumerization of IT. They seek to cut costs, perhaps — though whether the policy creates hard savings is debatable — and change the way IT and non-IT staff interact. Theyalso expect to improve the productivity of both the IT staff—newly freed from some support tasks—and colleagues who should require less technical training if they use the same machines at home and at work. Plus, BYOD can boost morale by acknowledging the growing demand from employees to use
BYOD | 2012

A STRATEGIC GUIDE FROM THE EDITORS OF CIO

the technology they like over what IT wants tosupport, says Leslie Jones, CIO of Motorola Solutions, which since 2008 has reimbursed employees for one personal smartphone ad allowed them to use the devices at work. BYOD is a “great acknowledgement of reality,” she says. Some CIOs, however, say BYOD is a nonstarter: an empty idea that saves no money but brings potentially expensive security and control problems to corporate IT. Companies thatoffer full-fledged BYOD programs are still in the minority. In an exclusive survey of 476 IT leaders, we found that 69 percent don’t allow employees to buy their own equipment for work while just 24 percent do. Yet of the 131 companies that allow BYOD, most only suggest which products employees should use, leaving the decision up to the individuals. Just 22 percent require employees to choose...