Bring Your Own Device (BYOD) policies are becoming increasingly popular as a way to save money and make employees happy. But too many organizations are finding themselves in legal trouble after implementing BYOD policies imprudently. The lesson here is to look before you leap. Here are ten things to heed before your association makes the transition to BYOD:
1) Policy: You must ensure you have a BYOD policy. Draft something (anything!) to cover BYOD usage and run it by your legal team.
2) Focus: Once you’re ready to tailor your BYOD policy, ensure that it fits your association. There is no one-size-fits-all approach to BYOD.
3) Clarify expectations: Clearly define in your policy when it is that employees are expected to use their device exclusively for work.
4) Informed consent: Remember that employees must expressly accept how and for what purposes the organization may access their devices.
5) Connections: Consider how employees connect remotely. Is their device secure? Does it require a password? If your data is important to you, this isn’t a peripheral matter.
6) Information: Consider what information you want to make accessible. Implementing BYOD does not necessarily mean that employees should have full access to sensitive data.
7) Compliance: Consider statutory, regulatory, and contractual BYOD requirements. Ignoring any one component is a lawsuit waiting to happen.
8) Training: Train your employees on how they should conduct themselves in accordance with your policy. Otherwise confusion will lead to conflict.
9) Monitoring: Consider how dual-use devices will be monitored. Do you have measures to monitor what data is made accessible? What are your employees pulling from your networks and when?
10) Staying current: Be aware of new developments in technology. Innovation can help immensely by keeping you a step ahead of potential problems. The trick is to monitor peer associations and mimic their best practices.
For further discussion on implementing a BYOD policy, be sure to check out the Association TRENDS webinar “BYOD for 501(c)s: Pros and Perils of Bring Your Own Device.”