As with most aspects of security at a company, the IT department has to stop everything cold in its tracks. Datamation said companies should think differently about a bring your own device policy, as endpoint security is great, but companies need to worry more about managing the risks of a program like this.

“When companies think about developing a BYOD strategy, some of the most complicated pieces of the equation are not technology issues but those that fall in the realms of liability, ownership and privacy,” said Phil Hochmuth, an analyst at IDC. “As organizations go beyond basic wireless and Internet-only access and offer broader network, data and corporate mobile applications, IT organizations must contend with the risks of this new mobility paradigm."

At one medical center based in Jerusalem, Datamation reported, the chief information security officer said they have a solution that allows them to understand the kinds of devices on their network, control security and enforce policies. This should help this organization manage their risks as effectively as possible.

Network World said with a bring your own device policy, it's more than simply managing the devices, as companies must also look to take care of other aspects. Applications, users and more must be considered when thinking about the security of a mobile program.