Abstract
Organisations that allow employees to Bring Your Own Device (BYOD) in the workplace trade off the convenience of allowing employees to use their own device against higher risks to the confidentiality, integrity, and availability of organisational information assets. While BYOD is a well-defined and accepted trend in some organisations, there is little research on how policies can address the information security risks posed by BYOD. This paper reviews the extant literature and develops a comprehensive list of information security risks that are associated with allowing BYOD in organisations. This list is then used to evaluate five BYOD policy documents to determine how comprehensively BYOD information security risks are addressed. The outcome of this research shows that of the 13 identified BYOD risks, only 8 were adequately addressed by most of the organisations.
Recommended Citation
Arregui, Daniel Alejandro; Maynard, Sean B.; and Ahmad, Atif, "Mitigating BYOD Information Security Risks" (2016). ACIS 2016 Proceedings. 8.
https://aisel.aisnet.org/acis2016/8