A phone at the front desk, a tablet on the shop floor, or an employee checking work email can make the day easier. Each device also needs a place in your security plan. For businesses in Cambridge City, Richmond, and central Indiana, start with a simple question: does this device need access to company systems, or just the internet?
Separate personal and visitor devices
Use a guest network for visitors and personal devices that only need internet access. Have IT configure firewall rules to block that network from reaching business computers, servers, and management pages. A different Wi-Fi name alone does not provide that protection. Test the separation, and allow specific exceptions only when there is a business need.
Decide which devices may access work
Keep a list of approved phones and tablets, their owners, and the work resources they use. Personal ownership does not automatically authorize access to company files. Decide whether each task belongs on an approved personal device or a company-managed device before sharing access.
Set a basic security standard
Require a supported operating system, current security updates, a strong screen lock, and device encryption where supported. Avoid allowing rooted or jailbroken devices to access work data. Review devices periodically, and plan to replace equipment that no longer receives security fixes.
Protect accounts as well as Wi-Fi
Give each employee an individual work account and enable multi-factor authentication. Prefer passkeys or security keys where supported. Restrict access to the applications and information each person needs. A phone on cellular data can still access company email, so wireless network rules are only one part of the plan.
Keep company data in approved apps
Choose approved tools for email, file sharing, and messaging. Discourage forwarding work documents to personal accounts. Mobile device or application management can help enforce settings and remove work data on supported devices. Explain what administrators can see and remove before enrolling a personal phone; available controls depend on the platform and enrollment method.
Plan for a lost phone or departing employee
Tell employees who to contact immediately if a device is lost, stolen, or used for a suspicious sign-in. IT should review account activity, revoke access and sessions, and remove company data where configured. Remote removal depends on device connectivity and management settings, so do not make it your only safeguard.
Write down the rules and practice them
Create a short bring your own device policy covering approval, updates, approved apps, privacy, incident reporting, and leaving the company. Walk through one example with staff: an employee loses a phone that has work email. Confirm who reports it, who can disable access, and how business continues.
Make a plan for your business.
Tell Summit about your technology and priorities. Our IT needs assessment is a practical place to start.
Start your IT assessment ↗Further reading
Official resources that support the topics discussed here.