Policy template

Bring Your Own Device (BYOD) Policy template

This policy exists to allow the use of personal devices for work while keeping company information protected. It applies to staff and contractors who use their own smartphones and tablets to access company information.

Create this policy

What the policy contains

Eligible devices and access
Protection of company data
Loss, theft and leaving

Who is responsible

All staff and contractors
IT Manager
Information Security Manager

What you decide

Personal devices allowedSmartphones · Tablets · Laptops
What personal devices may accessEmail and calendar only · Approved business applications · All company services
Enrolment in device management (MDM) is required
Loss or theft reported within (hours)

References covered

ISO/IEC 27001 Annex A: control 5.10
ISO/IEC 27001 Annex A: control 6.7
ISO/IEC 27001 Annex A: control 8.1
GDPR: Art. 32 security of processing
NIS2: Art. 21(2)(i) asset management
NIS2: Art. 21(2)(g) basic cyber hygiene practices

Bring Your Own Device (BYOD) Policy template

What the policy contains

Who is responsible

What you decide

References covered

Other policy templates

Bring Your Own Device (BYOD) Policy template

What the policy contains

Who is responsible

What you decide

References covered

Other policy templates