A BYOD policy authorises wiping an employee’s entire personal phone when employment ends. Which control design better respects privacy?
Select an answer to reveal the explanation.
Short Explanation
Nuking someone’s whole phone to remove work email is using a wrecking ball for a sticky note. Prefer work containers and selective wipe. Protect the company data without torching the family album.
Full Explanation
Full-device wipe of personally owned phones maximises interference with employees’ private data and may be disproportionate when selective controls exist. Containerisation, work profiles, and selective remote wipe limit processing to employment-related data. BYOD policies should document less intrusive security measures and clarify boundaries between corporate and personal content.