1
Classify by device, not by job title
Company laptops, employee-owned phones, contractor devices, and public computers each get their own rule for what they can and can't touch, instead of one blanket policy for everyone.
What This Resource Includes
Everything you need to set rules for remote work and personal devices, including what they can access, what's required before they connect, and what happens when someone leaves.
2
Steps for every stage
Clear steps for signing up a device, handling data day to day, responding to a lost or stolen device, and cutting off access when someone leaves, with who's responsible and how fast.
3
Forms you can use right away
A sign-up form for personal devices, a checklist employees can use to check their own device, a form for them to sign, and a list of approved apps and tools.
Why Remote Work and Personal Devices Need Their Own Rules
Most security policies assume everyone's on a company laptop, on the office network. Remote work and BYOD don't work that way. The device might be personal, the network could be anything, and if a phone gets lost or a laptop never gets wiped, you might not find out until it's too late. This template helps you catch that early.
- Decide what each device can access based on how it connects and what it's for, not just who owns it.
- Spell out what the company can and can't see on someone's personal phone before they sign up, not after they ask.
- Set clear timelines for cutting access and wiping company data when someone leaves.
- Skip the drafting. The sign-up form, device checklist, and approved tools list are already done for you.
