TechKnowSurge
CompTIA Network+ 1.8 CompTIA A+ Core 2 2.7 CompTIA SecurityX 1.2 CompTIA Network+ 4.3 CompTIA A+ Core 1 4.2 CompTIA SecurityX 2.5
TechKnowSurge Catalog Videos What’s Bring Your Own Device (BYOD)?
VideoNetworkFree

What’s Bring Your Own Device (BYOD)?

BYOD (Bring Your Own Device) is the practice of employees using personal equipment for work purposes, bringing both operational benefits and notable security challenges. Organizations are increasingly adopting BYOD policies as user demand grows and management technologies improve.

⚑ Complete this video to capture a CTF flag worth 1 point.

About this video

Bring Your Own Device, commonly known as BYOD, is the practice of employees using personally owned hardware — laptops, smartphones, or other equipment — to perform work-related tasks. The concept extends to variations like Bring Your Own Computer and Bring Your Own Technology, but the core idea remains consistent: personal devices are used within or on behalf of an organization, either by policy or by employee preference. Despite its appeal, BYOD presents several significant challenges. Not every employee owns hardware capable of meeting job requirements, which means organizations may still need to supply equipment for some staff. Supporting a wide range of device makes, models, and operating systems also places a heavier burden on IT teams, since each hardware variation may carry its own driver sets, compatibility issues, and maintenance demands. Security is the most critical concern of all — when company data resides on a personal device, questions arise around what happens to that data if the employee leaves, or whether the device itself meets minimum security standards. Despite these challenges, momentum toward BYOD has grown steadily, driven largely by employee demand. Many workers prefer to consolidate their tools rather than carry separate personal and work devices. At the same time, the gap between consumer and enterprise technology has narrowed, and employees tend to be more capable of self-supporting their own hardware than in previous eras. Technologies like mobile device management, remote and automated wipe capabilities, and virtual desktop infrastructure have addressed many of the security objections by keeping sensitive data within controlled environments rather than stored locally on personal devices. For organizations, reduced hardware procurement and support costs provide an added financial incentive. BYOD was once widely resisted by IT and security teams, but a combination of user expectations and maturing management solutions has made it a legitimate and increasingly common approach to workforce computing.

What you'll learn

What's covered

Bring Your Own Device (BYOD)

Aligned to

CompTIA Network+
1.8 Summarize evolving use cases for modern network environments.
4.3 Given a scenario, apply network security features, defense techniques, and solutions.
CompTIA A+ Core 2
2.7 Explain common methods for securing mobile and embedded/specialized devices.
CompTIA SecurityX
1.2 Given a scenario, implement the appropriate risk management strategies, policies, and controls.
2.5 Given a scenario, implement appropriate controls to secure cloud and virtualization solutions.
CompTIA A+ Core 1
4.2 Summarize aspects of client-side virtualization.

Key terms

Bring Your Own Device
BYOD
Bring Your Own Device is a policy that permits employees to use personal devices to access corporate systems and data, introducing security challenges around data segregation, device management, and policy enforcement.
Mobile Device Management
MDM
Mobile Device Management is a software solution that enables organizations to remotely enroll, configure, monitor, and enforce security policies on employee mobile devices, including the ability to wipe lost or compromised devices.
Virtual Machine
VM
A software emulation of a physical computer that runs an operating system and applications.
Virtualization
The use of software to create virtual versions of computing resources, allowing users to access a remote virtual environment rather than storing data locally on a personal device.
Data Exfiltration
The unauthorized transfer of data from a system to an external destination.
Endpoint
Any device that connects to a network, including computers, smartphones, tablets, and IoT devices.
Attack Surface
The total set of points in a system where an unauthorized user can attempt to enter or extract data.

Transcript

What Bring Your Own Device Means

Bring your own device, or BYOD, is a very simple concept. Bring your own device is the idea that you're going to bring your own equipment to your work. So whatever organization you're working at, maybe it's an expectation that you bring your own equipment, or you're just allowed to bring your own equipment, and maybe they have an option available that they'll give you, but if you don't choose to take it, then you can just bring your own device.

So that's bring your own device, and it goes by many different names: bring your own computer, bring your own technology, bring your own phone. It just depends on how you want to define it. But the idea behind this is still the same. You're just bringing your own equipment into the organization and using it.

Problems with Bring Your Own Device

One of the first problems with bring your own device is that not all employees might have the right equipment to do their job successfully. So in that case right there, maybe the employer allows people to bring their own device, but it's not necessarily a requirement, and then they can supply the right equipment for those employees that don't have the right equipment.

The second problem with bring your own device is just the level of support that it needs. Here I have three different laptops, three different laptops from the same company. These two are similar models, they're just from different eras. And then this one right here is a different model completely.

Now, it takes quite a bit of effort to support a laptop, to support a user. And so when you have variances, and these were bought at two different eras, two different times, there's different driver sets and different ways to support this, different issues that each one of these came with. There tends to be these string of issues with certain laptops and certain brands and certain eras. And so getting familiar with one of these and supporting one of these, and then having to support a second one, adds a little extra work, especially when you're talking about a different model, or if you talk about a different brand. Like I have a Mac back here, and so if you're talking about the difference between supporting a Mac and supporting these Dells, there's a huge difference. So that can be problematic when you're starting to support just all of these different types of laptops that are out there. It can be very problematic.

Perhaps the biggest concern, though, is just the security of it all. If I'm bringing my personal laptop to work, I'm doing all of the work on this laptop. Then what happens if, for instance, maybe I get fired, and now I have all of this company data on this laptop? That's a security issue. Or how secure do I have my laptop? That can be a problem. And so there's all of these security problems that arise when people are using their personal equipment for work.

A lot of times people don't allow the personal laptops to be at work, but sometimes they'll still allow you to use your personal phones for work purposes and download your email to your phone. And this can be problematic also. That's still company data that's on that phone now, so that's a concern as well.

Why There Is a Movement Toward It

So why is there even a movement towards bring your own device? Well, one is that a lot of users want it. A lot of users don't want an extra laptop. They want to use their personal laptop for work, or their phone. They don't want to carry multiple phones, and so they want to use their phone for work purposes. So for one, you just have a bunch of users that are requesting it. That's perhaps one of the biggest drivers of why we're moving towards bring your own device.

Another reason is because there's becoming more and more similarities between the different technologies, so it's becoming easier to support that technology. Not to mention that the users are now more tech-savvy, and so they can support their own equipment, maybe perhaps even better than the IT department, at least faster than the IT department.

Security is still the big one and still a big hangup. But we do have more and more technology that's being implemented that allows a bring your own device. For instance, we now have things like the mobile wipe on phones. So if you're downloading your email and company data onto your phone, there's a mobile wipe that can happen to wipe out a phone, and you agree to it when you make a connection to that server. So there's mobile device management that's happening, that we can do these auto wipes on to wipe data.

Another thing that's happening is things like virtualization. So rather than you actually working on your laptop and everything being local, you have a virtual machine that you log into and then you do everything on the virtual machine. So all of that data still resides within the company rather than downloading it to your personal laptop, but you can still use your laptop to access that virtual environment. So those are the things that are coming up now to help support this bring your own device.

I suppose another one as well is for the company they save a little bit of money, because now they don't have to provide that level of support for your personal laptop. You have to provide that. Not to mention you're providing the equipment, which can get very spendy for a company to have.

So bring your own device used to be something that it was really against. But because of the demand for it, and because we're coming up with ways to overcome some of those issues, now it's a little more acceptable, and there are some companies that are allowing this bring your own device.

About TechKnowSurge

TechKnowSurge builds IT and cybersecurity professionals through hands-on, concept-first training built around real understanding — not memorization. Free interactive tools, structured programs, and 25+ years of real-world experience, all in one place.

Explore free tools and programs →