This is such a relevant post, especially with so many firms facing the decision to go for BYOD or not. Unfortunately, there is no straightforward way to reach a conclusion. Like most systems or policies, BYOD comes with its pros and cons. Benefits include increased productivity and better work output, while disadvantages include possible security risks and breaches. 

When firms explore BYOD and decide to allow it or not, they really should consider facts instead of going with their pre-concieved notions or assumptions. Good post, Jason!

Good question, Jason.  I think the business has to determine its level of risk, and decide whether to require remote wipe on employees' mobile devices in cases of loss or theft.  It doesn't stop the insider threat of an employee copying or downloading files for malicious purposes, but that's not a BYOD issue.

Harrassment doesn't have a single point of protection, Jason.  So no, I'm not saying that it'll stop harrassment.

I'm saying that it will be part of the prevention regime.  That "wifey" video, 2Live Crew, Eminem, anything NSFW under a "company hardware" system won't cease being NSFW under a BYOD system.

And employers will demand (rightly so, IMO) some amount of ability to enforce that.

@Rob

Good example with the Samsung commercial, exactly what I'm saying.

But I'm a bit confused by your closing point.  Are you arguing that MDM on BYOD hardware prevents workplace harassment?  

As I see it, it could LEAD to workplace harassment in some case (e.g. for example if the guy in the commercial's IT guy scooped up that video and shared it with his fellow IT cohort and then somehow word got out to the guy whos video was illicitly viewed.

Jason:

A question for both of you, as you're on the pro-BYOD (or at least feeling it is an inevitability) side of the fence -- do you think employee BYOD hardware should be managed via traditional MDM?

Or do employees earn the privilege of not being managed by saving you the cost and bringing their own device?

BYOD in *some* form is an inevitability.  So the BBC is being unrealistic in thinking they can just refuse it and still hire/retain the kinds of employees an organization needs to survive in this business world.

At the same time, employees who think BYOD won't incur some kind of cost in freedom or privacy are being equally unrealistic.

I need to be blunt here, but I hope I don't offend.  My tastes in entertainment include a... let's call it "more adult-oriented" nature.  I'm not afraid to call it kinky and leave it at that.

I'm also aware that the latest Samsung Galaxy-series phone has an advertisement being broadcast in the USA of a man leaving on a trip (business, presumably) and his little girls share a video that they say he can watch on the plane.  Then the wife shares a video with him, and she advises, "You probably don't want to watch that on the plane."

Wink, wink, nudge, nudge.

But, wait.  If that's a BYOD device, what happens when that content winds up in the workplace?  Not "if."  "When."

So the device is mine, or belongs to the gent in the above commercial.  The data, too, is personal.  But it's on a device that going into the workplace.

You really think an employer is going to permit that to go unmanaged?  Are they going to wait until they make this list to engage some form of device *and* data management?  I doubt it.

I believe you need some management of the employee's devices. Otherwise you are taking a big risk. What if the employee downloads something onto their device and the loses it, or has it stolen. Say this had customer names or other data that could compromise the company. Even though it is their device you can't leave it up to the user to adhere to proper security procedure. You need to really think about MDM if you are going to implement BYOD

@Kim Davis and smkinoshita

I think your points on cost savings (via reducing hardware purchases) is dead on -- that's a compelling advantage of BYOD.

Also, as you say the more you deny something the more employees want it.

A question for both of you, as you're on the pro-BYOD (or at least feeling it is an inevitability) side of the fence -- do you think employee BYOD hardware should be managed via traditional MDM?  

Or do employees earn the privilege of not being managed by saving you the cost and bringing their own device?

I guess, if I were to back BYOD at a workplace, it would have to be a scheme that did not involve MDM of personal devices.  Of course, that could backfire, but at least employee privacy would be preserved.

Right, and unless you have a locked-down intranet, employees are going to be able to use their personal devices.  We have authentication protocols for our network here, of course, but it does sit on the Internet, so I can access it from anything which connects to the Web.  It doesn't even have to be "my" device!

Most organizations are going to have at least some kind of open face to the Web these days -- and that's an open invitation.

@Jason:  I agree with Kim.  Much like social media (or perhaps in part because of social media?) BYOD is something a company needs to manage in an intelligent way.

Basic element of human nature:  the more you tell people they can't do something, the more likely someone's going to do it anyway out of spite... and the spite is when trouble happens.  People will do business over their devices because they think they know better, or because they saw someone who was savvy enough do it successfully.  

I think rather than simply embrace or deny BYOD, organizations should approach it like social media:  draft a policy and make sure everyone knows the what,  why, and potential consequences. 

By demonstrating that the organization is aware of the potential benefits AND dangers of BYOD, it takes some of the heavy-handed 'dinosaur' feel away from management, and makes sure employees understand the risks they face with their own devices in or out of work -- which is good for everyone.

Haha, good point. Although some companies do that (Looks at NSA down the street). That place will literally shake your phone right out of you and with good reasons of course.

It really is, like you said, a fact of life and it's something that companies should embrace with knowledge rather than ignorance.