Mobile Device Management, BYOD - Proper Sky

1. Device Enrollment: When opting to use their own device, employees will be required to enroll their device in their organizations BYOD MDM program. During this enrolling, the device will be configured to adhere to particular security policies and settings that have already been determined by their employer

2. Security Policies: The organizations IT department, or MSP, can/will enforce policies on these enrolled devices. Generally, these policies are more-or-less best practice for cybersecurity, such as requiring strong passwords (character limit, special characters, etc.), data encryption, and ensuring software updates are seen regularly.

3. Application Management: Mobile device management also may push out the installation of certain applications that your company requires you to have on your mobile device whether this be a company portal or Microsoft Teams, Office, etc.

4. Data Protection: BYOD MDM helps safeguard sensitive organizational data by enabling measures like remote wipe, selective data wiping, and data encryption. This is crucial in case the device is lost, stolen, or in the event of an employee leaving the organization.

5. Separation of Work and Personal Data: One of the challenges with BYOD is separating work-related data from personal data on the device. MDM solutions can create containers, or profiles, on a device that may keep your business-sided software totally sepearate from that of your standard applications.

   1. Android devices will offer a totally separate profile, similar to that which you’d find on a PC.

   2. Apple devices will keep everything separate, in terms of permissions, security measures, etc., but they will all be found in the same location (somewhere on your homescreen).

6. Monitoring and Compliance: Organizations can monitor the usage and behavior of devices to ensure they comply with security policies and industry regulations. This includes tracking device health, identifying potential security threats, and responding to security incidents.

7. User Privacy: Balancing the security needs of the organization with the privacy of the user is crucial in BYOD MDM. Organizations must implement measures that protect company data without overly infringing on the user’s personal space.

What Can My Employer See?

Your employer should only be able to see the applications they have pushed onto your phone. For example, if you are doing your personal browsing in the Microsoft Edge browser that your employer had installed via MDM, then they likely can see what you are up to. With that being said, if you instead browse on a different browser, such as your phone’s native browser, you’re likely to be fine in terms of keeping your data private.

Your employer cannot read your text messages. But, your employer may be able to read your Microsoft Teams chats if you are on a work profile.

Your employer cannot see your photos. But, your employer may be able to see your photos you backed up to your company managed cloud service.

In short, keep your personal data off of the apps that your company controls and you are likely fine.

What if I Lose My Phone?

If you lose your phone, let your IT team know as soon as you can. In the event of a lost, broken, stolen, etc. phone, your personal data will not be wiped/deleted but, your company data will be revoked from the phone (still accessible in some capacity, likely from your laptop).