BYOD is about offering choice to employees. By embracing the consumerization of Information Technology (IT), organisations can address the personal preferences of its employees, offering them increased mobility and better integration of their personal and work lives. It also enables employees the flexibility to work in a way that optimizes their productivity.

Avaso offer the BYOD to companies to remediate the hurdles of security, policy, technical, and legal not only to internal communications, but also to relationships and trust with business and partners. We understand the magnitude of the issues is a function of both the sensitivity of the underlying data and the amount of processing and data storage allowed on the personal device based on the technical approach adopted.

The business case for implementing BYOD vary from company to company, but often involve the following drivers: to reduce costs, increase program productivity  and effectiveness, adapt to a changing workforce, and improve user experience.

Avaso consider the below points while determining a BYOD program for our customers,
Technical approach
Virtualization
Walled garden
Limited separation
Roles and responsibilities
Organization
User
Help/service desk
Technical support
Incentives for employees
Survey employees on benefits and challenges
Consider voluntary vs. mandatory participation in BYOD program and impact on terms of service
Education, use, and operation
Establish orientation, trainings, and user agreements
Consider impact of connectivity and data plan needs for of chosen technical approach (e.g., virtualization) on employee reimbursement
Security
Assess and document risks in:
Information security (operating system compromise due to malware, device misuse, and information spillover risks)
Operations security (personal devices may divulge information about a user when conducting specific activities in certain environments)
Transmission security (protections to mitigate transmission interception)
Ensure compliance with company standards for processing and storing organization data on own device.
Assess data security with BYOD versus the devices being replaced
Securely architect systems for interoperability (company data vs. personal data)
Privacy
Identify the right balance between personal privacy and organizational security
Document process for employee to safeguard personal data if / when company wipes the device
Ethics / legal questions
Define “acceptable use” from both organizational and individual perspective
Address legal discovery (including confiscation rights) and liability issues (e.g., through pre-defined opt-in requirements in terms of service)
Consider implications for equal rights employment (e.g., disparity in quality of personal devices)
Devices and applications (apps)
Identify permitted and supported devices to prevent introduction of malicious hardware and firmware
Define content applications that are required, allowed, or banned and consider use of mobile device management (MDM) and mobile application management (MAM) enterprise systems to enforce policiee.
Adopt existing app development best practices to support device-agnosticism and data portability across platforms
Address app compatibility issues (e.g., accidental sharing of sensitive information due to differences in information display between platforms)
Recommend approach to content storage (cloud vs. device)
Clarify ownership of the apps and data
Asset management
Disposal of device if replaced, lost, stolen, or sold, or employment is terminated (must remove company information before disposal)
Reporting and tracking lost / stolen personal devices
Replacement of personal lost devices if employee chooses not to replace with personal funds
Funding for service and maintenance