How to Secure Employee-Owned Computers at Work

TL;DR

Employee-owned computers can reduce corporate equipment costs and improve satisfaction, but organizations must control compatibility, support, licensing, patching, privacy, and access risks. A workable program needs an explicit policy, defined hardware and software requirements, clear responsibility for maintenance and upgrades, trained help-desk staff, loaner devices, and separation of corporate information from personal systems and accounts.

Transcript

Hello, my name is Ron Lapidus. I'm a co-presenter with-- on this session with Michael Angelo, who I'm afraid cannot join us today, so I'm gonna do this session alone. The session title is Bring Your Own Computer to Work. What now? So we're talking about the consumerization of IT. BYOC, bring your own computer to work. We'll talk about how it happen... Read More

Key Insights

• Consumerization of IT is the use of employee-owned resources to perform company work. It can include personal desktops and laptops, remote access from home computers, mobile phones, USB flash drives, personal digital assistants, music players, smartphones, and personally supplied computer accessories.
• Employee-owned business computing was already widespread according to the cited In-Stat figures. Forty percent of computers used for business had been purchased by employees, while ten percent of laptops were employee-purchased devices serving as the worker's primary business laptop.
• Employee preferences drive BYOC adoption because workers may reject underpowered computers, unwanted operating systems, old browsers, prescribed software tools, and locked-down configurations. People accustomed to controlling their home computers can become frustrated when company systems prevent software installation or personalization.
• Organizational responses to BYOC range from secrecy to formal subsidies. Employees may hide personal devices, companies may quietly tolerate them, help desks may provide unofficial assistance, formal policies may permit and support them, or employers may fund part or all of the equipment and support.
• Employee-owned computers can reduce equipment purchasing costs by nine to forty percent, according to the cited Gartner estimate. Companies may also leave recurring hardware upgrade cycles, while employees gain familiar operating systems, shortcuts, settings, and personalized environments that can support satisfaction and productivity.
• Help-desk complexity increases when employees bring different computing environments. Support staff may need knowledge of Windows, Macintosh, and Linux, while organizations may need loaners with matching operating systems and standard corporate tools when an employee's personal laptop requires repair.
• Hardware and software compatibility are essential BYOC requirements. A personally chosen computer may not support required business tools, security controls, or corporate configurations, while a preferred browser or operating system may fail to interoperate with company standards, applications, upgrades, or updates.
• Ownership creates licensing, privacy, and credential risks because home-use software may prohibit business activity, corporate site licenses may not cover personal computers, and personal devices may store VPN configurations, user IDs, passwords, corporate applications, and regulated customer information.

Questions & Answers

Q: What is bring your own computer at work?

Bring your own computer at work is a form of IT consumerization in which employees use personally owned resources to perform company work. The practice can involve a personal desktop or laptop used as the primary business device, a home computer used for remote access or document editing, or smaller personal devices and accessories used for work purposes.

Q: Why do employees bring personal computers to work?

Employees may bring personal computers because they dislike underpowered company hardware, restricted operating systems, older browsers, prescribed software tools, or locked-down configurations. They often prefer equipment that is faster, familiar, personalized, and under their control. Using the same operating system, shortcuts, settings, and tools at home and work can also make their computing environment more comfortable.

Q: What business benefits can employee-owned computers provide?

Employee-owned computers can reduce company equipment purchase costs by between nine and forty percent, according to the Gartner figure cited in the session. They can also reduce the company's involvement in recurring hardware upgrades. Employees may be happier and more productive with familiar machines, and they may work longer because their laptop is already available when they are at home.

Q: How can a company formally support employee-owned computers?

A company can establish a policy that explicitly permits employees to bring personal equipment, allows approved devices onto the corporate network, and defines support from the help desk and IT department. It may also subsidize part or all of the computer and its support. The policy should replace hidden or informal practices with clear organizational responsibilities and expectations.

Q: What support challenges does a BYOC program create?

A BYOC program can require help-desk staff to understand every major operating environment employees use, especially Windows, Macintosh, and Linux. The organization may also need loaner machines when a personal laptop breaks. Those loaners do not need identical personalization, but they should provide the appropriate operating system and the standard corporate tools required for work.

Q: How should companies handle BYOC hardware and software compatibility?

Companies should determine whether personal hardware can run required business tools, accept mandatory security controls, and match necessary corporate configurations. They must also consider whether an employee's preferred operating system, browser, and applications interoperate with corporate standards. Responsibilities for maintenance, warranties, software upgrades, updates, and device repairs should be established before personal computers become primary work systems.

Q: What software licensing risks arise from employee-owned computers?

Software installed on a personal computer may carry a restricted-use license that prohibits business activity, such as a home or student edition. Conversely, a corporate site license may not authorize installation on employee-owned equipment. Organizations should examine what each license permits because unauthorized business use or installation could become an issue if the company is audited.

Q: What security and privacy risks come with personal work computers?

An unpatched personal computer can develop vulnerabilities, acquire a virus, and introduce that threat into the business. Personal devices may also store corporate VPN configurations, user IDs, passwords, browser-saved credentials, applications, and customer data. Organizations must additionally consider privacy and data-protection obligations, including the laws and industry requirements identified in the session.

Summary & Key Takeaways

• Consumerization of IT occurs when employees use personally owned resources for company work, ranging from mice and keyboards to smartphones, desktops, and laptops. Adoption may be hidden, tolerated, unofficially supported, formally supported, or subsidized, so organizations must first recognize how employee-owned technology is already entering their working environment.

• Employee-owned computers can save companies between nine and forty percent on equipment purchases, reduce involvement in hardware replacement cycles, increase employee satisfaction, and encourage additional work outside normal hours. These benefits come with broader support demands because help desks may need expertise across Windows, Macintosh, and Linux environments, plus suitable loaner machines.

• A responsible BYOC program must address hardware compatibility, required security controls, maintenance, warranties, upgrades, software interoperability, patching, vulnerabilities, and license restrictions. It must also protect corporate credentials and customer data stored on personal machines while considering privacy obligations and the mixing of personal accounts with company-owned systems.