BYOD For 501(c)s: Pros And Perils Of "Bring Your Own Device"

CURRENT ISSUES

What Is Bring Your Own Device?

• Central management of the security of personally-owned mobile devices, including smart phones and tablets, to support the following security objectives:
  
  
  • Confidentiality – ensure that transmitted and stored data cannot be read by unauthorized parties
  • Integrity – detect any intentional or unintentional changes to transmitted and stored data
  • Availability – ensure that users can access resources using mobile devices whenever needed

See, e.g. NIST Guidelines for Managing the Security of Mobile Devices (800-124).

What Issues Are Presented by BYOD?

• Hypothetical 1: During a board meeting, the CEO makes reference to a sensitive document, which he has emailed to his personal smartphone from his corporate account.