Multiple machines.
WHAT TO ESTABLISH
Which devices exist Who holds each Whether each is current What business access each has
WHY A LIST
You cannot secure devices you have not counted.
WHAT TO REQUIRE
Screen locks Updates enabled Encryption where supported Security software
FOR PERSONAL DEVICES USED FOR WORK
Establish what is acceptable.
That is a decision to make deliberately, not by default.
WHAT TO CONSIDER
Whether business data may be held on personal devices What happens to it when someone leaves Whether you can require anything of a device you do not own
WHAT TO PROVIDE
Business devices, where the risk warrants it.
WHEN SOMEONE LEAVES
Recover business devices Remove access from personal ones Change anything they knew
WHAT TO REVIEW
The device list, quarterly.
WHAT YOU WILL FIND
Devices nobody has updated, and devices held by people who left.
