TechKnowSurge
TechKnowSurge Catalog Videos Bring Your Own Device (BYOD)
VideoSecurityFree

Bring Your Own Device (BYOD)

BYOD (Bring Your Own Device) covers the security risks, support challenges, and organizational benefits of employees using personal devices for work. It also examines the technologies and trends making BYOD more viable for modern businesses.

⚑ Complete this video to capture a CTF flag worth 1 point.

About this video

Bring Your Own Device (BYOD) is the practice of employees using their own personal equipment — whether a laptop, smartphone, or other technology — to perform work-related tasks, either by choice or as an organizational expectation. The concept covers a range of scenarios, from employees who prefer consolidating their personal and professional tools onto a single device, to organizations that allow BYOD as an option while still supplying equipment to those who need it. Despite its appeal, BYOD presents real challenges. Not every employee owns hardware capable of meeting job requirements, which means organizations must still maintain some provisioning capability. IT support complexity also increases significantly when staff bring a wide variety of device makes, models, and operating systems, each with its own driver sets, known issues, and maintenance demands. The most critical concern, however, is data security. When company data resides on a personal device, controlling access to that data becomes difficult — particularly when an employee leaves the organization or a device is lost or stolen. The push toward BYOD has been driven primarily by employee preference, as many users prefer to work from a single familiar device rather than carrying separate personal and work equipment. Advances in technology have helped address earlier objections. Mobile device management (MDM) platforms now allow organizations to enforce security policies and remotely wipe company data from enrolled personal devices. Virtualization offers another layer of protection by keeping data within the corporate environment while allowing employees to access it through their own hardware. Together, these tools have shifted BYOD from a largely prohibited practice to one that many organizations are now willing to support under the right conditions. From a financial standpoint, BYOD can reduce hardware and support costs for employers, since the burden of equipment ownership and basic troubleshooting shifts to the employee. While security remains the primary concern, the combination of growing demand, improved management tools, and cost benefits has made BYOD a standard consideration in modern IT and security policy planning.

What you'll learn

What's covered

Bring Your Own Device (BYOD)

Key terms

Bring Your Own Device
BYOD
Bring Your Own Device is a policy that permits employees to use personal devices to access corporate systems and data, introducing security challenges around data segregation, device management, and policy enforcement.
Mobile Device Management
MDM
Mobile Device Management is a software solution that enables organizations to remotely enroll, configure, monitor, and enforce security policies on employee mobile devices, including the ability to wipe lost or compromised devices.
Virtual Machine
VM
A software emulation of a physical computer that runs an operating system and applications.
Endpoint
Any device that connects to a network, including computers, smartphones, tablets, and IoT devices.
Data Loss Prevention
DLP
A set of tools and processes designed to detect and prevent unauthorized access, use, or transmission of sensitive data.
Encryption
The process of converting readable data into an unreadable format using an algorithm and key to prevent unauthorized access.
Security Policy
A formal document that defines an organization's security goals, rules, and responsibilities.
Attack Surface
The total set of points in a system where an unauthorized user can attempt to enter or extract data.

Topics

Byod Mobile Device Management Endpoint Security Cybersecurity Policy Mobile Security

Transcript

What Bring Your Own Device Means

Bring your own device, or BYOD, is a very simple concept. Bring your own device is the idea that you're going to bring your own equipment to your work. So whatever organization you're working at, maybe it's an expectation that you bring your own equipment, or you're just allowed to bring your own equipment, and maybe they have an option available that they'll give you, but if you don't choose to take it then you can just bring your own device.

It goes by many different names: bring your own computer, bring your own technology, bring your own phone. It just depends on how you want to define it, but the idea behind this is still the same. You're just bringing your own equipment into the organization and using it.

Problems with Bring Your Own Device

One of the first problems with bring your own device is that not all employees might have the right equipment to do their job successfully. In that case right there, maybe the employer allows people to bring their own device, but it's not necessarily a requirement, and then they can supply the right equipment for those employees that don't have the right equipment.

The second problem with bring your own device is just the level of support that it needs. Here I have three different laptops — three different laptops from the same company. These two are similar models, they're just from different eras, and then this one right here is a different model completely.

It takes quite a bit of effort to support a laptop, to support a user. And so when you have variances — and these were bought at two different eras, two different times — when you have variances, there's different driver sets and different ways to support this, different issues that each one of these came with. There tends to be a string of issues with certain laptops and certain brands and certain eras. Getting familiar with one of these and supporting one of these, and then having to support a second one, adds a little extra work, especially when you're talking about a different model. Or if you talk about a different brand, like I have a Mac back here, and if you're talking about the difference between supporting a Mac and supporting these Dells, there's a huge difference. So that can be problematic when you're starting to support all of these different types of laptops that are out there. It can be very problematic.

Perhaps the biggest concern, though, is just the security of it all. If I'm bringing my personal laptop to work, I'm doing all of the work on this laptop. Then what happens if, for instance, maybe I get fired and now I have all of this company data on this laptop? That's a security issue. Or how secure do I have my laptop — that can be a problem. There's all of these security problems that arise when people are using their personal equipment for work.

A lot of times people don't allow personal laptops to be at work, but sometimes they'll still allow you to use your personal phones for work purposes and download your email to your phone. This can be problematic also. That's still company data that's on that phone now, so that's a concern as well.

Why There's a Movement Toward BYOD

So why is there even a movement towards bring your own device?

One is that a lot of users want it. A lot of users don't want an extra laptop — they want to use their personal laptop for work, or their phone. They don't want to carry multiple phones, so they want to use their phone for work purposes. So you just have a bunch of users that are requesting it. That's perhaps one of the biggest drivers of why we're moving towards bring your own device.

Another reason is because there's becoming more and more similarities between the different technologies, so it's becoming easier to support that technology. Not to mention that the users are now more tech-savvy, and so they can support their own equipment — maybe perhaps even better than the IT department, at least faster than the IT department.

Security is still the big one and still a big hangup, but we do have more and more technology that's being implemented that allows a bring your own device. For instance, we now have things like the mobile wipe on phones. If you're downloading your email and company data onto your phone, there's a mobile wipe that can happen to wipe out a phone, and you agree to it when you make a connection to that server. So there's mobile device management that's happening that lets us do these auto wipes to wipe data.

Another thing that's happening is things like virtualization. Rather than you actually working on your laptop and everything being local, you have a virtual machine that you log into and then you do everything on the virtual machine. So all of that data still resides within the company rather than downloading it to your personal laptop, but you can still use your laptop to access that virtual environment. Those are the things that are coming up now to help support this bring your own device.

I suppose another one as well is that for the company they save a little bit of money, because now they don't have to provide that level of support for your personal laptop — you have to provide that. Not to mention you're providing the equipment, which can get very spendy for a company to have.

So bring your own device used to be something that it was really against, but because of the demand for it, and because we're coming up with ways to overcome some of those issues, now it's a little more acceptable.

About TechKnowSurge

TechKnowSurge builds IT and cybersecurity professionals through hands-on, concept-first training built around real understanding — not memorization. Free interactive tools, structured programs, and 25+ years of real-world experience, all in one place.

Explore free tools and programs →