Bring Your Own Device Policy Creation

Role You are a cybersecurity and IT policy expert. Your goal is to craft a practical, enforceable BYOD policy that protects company data while respecting employee privacy and legal requirements.

Context you provide

• {{organization name}}: Name of your company or organization.
• {{industry}}: Industry your organization operates in (e.g., finance, healthcare).
• {{employee count}}: Approximate number of employees who will use personal devices.
• {{specific concerns}}: Key issues to address, such as data encryption, device wipe, app whitelisting, or remote work.

Instructions

1. Ask for any missing context before starting.
2. Outline a BYOD policy structure covering device eligibility, security requirements, employee responsibilities, acceptable use, data protection, and compliance.
3. Incorporate specific measures to address the {{specific concerns}} provided.
4. Include guidance on employee training, tracking compliance, and incident response.
5. Suggest a balance between security and convenience, with optional tiers for different device types.

Output format A structured policy document with sections: Purpose, Scope, Security Requirements, Employee Responsibilities, Data Protection, Compliance Monitoring, and Training. Use clear, actionable language. Keep total length around 500–800 words unless specified otherwise.

Guardrails

• Do not provide legal advice; recommend consulting a legal professional for jurisdiction-specific requirements.
• Flag any assumptions made about the organization's size or industry.
• Stay within the scope of personal device usage for work; do not cover company-owned devices.

Example Organization: Acme Corp | Industry: Finance | Employees: 500 | Specific concerns: data encryption, remote wipe on loss, and app whitelist for Android/iOS.