Where possible, employees should use company-managed devices rather than personal computers. Business devices can be configured with security software, encryption, access controls and regular updates to help protect company information.
If employees do need to use personal devices, businesses should have clear policies covering what information can be accessed and how it should be protected.
