Bring your own device (BYOD) policy template
For staff using personal phones or computers for work. Devices must be enrolled in device management, kept updated, screen locked and not jailbroken or rooted, and a lost device is reported to IT at once; confirmed yearly.
- App: Attestation Flow for Confluence
- Category: Security
- Edition: Picking the pack works in every edition; the paid settings and the starter text need a paid licence
- Re-acknowledge: every 365 days
Acknowledgement settings
#| Setting | Value in the pack |
|---|---|
| Suggested due date | 14 days after the requirement is set |
| Acknowledge again every | 365 days (paid) |
| Minimum reading time | 60 seconds (paid) |
| Quiz questions | 1 (paid) |
Note shown to readers:
By acknowledging, you confirm your personal devices used for work meet the BYOD requirements.
Starter text
#Template. This template is a starting point, not legal advice. Adapt it to your organisation, your contracts and the law that applies to you, and have it reviewed by a qualified professional before you rely on it.
Scope
This policy applies to any personal device used to access [Company] email, chat, files or systems.
Requirements
- Enrol the device in [device management tool] before accessing work data.
- Keep the operating system and apps up to date.
- Use a screen lock with a PIN of at least [length] digits or biometrics.
- Do not jailbreak or root the device.
Work data
- Keep work data inside approved apps; do not copy it to personal apps or backups.
- [Company] may remove work data remotely; it will not access your personal content.
Lost or stolen devices
Report a lost or stolen device to IT at [contact] immediately.
Leaving
When you leave [Company], work data and apps are removed from your device.
Quiz
#Includes 1 quiz question; the answers are not published here. They are shown only in the app's requirement editor, to the person setting up the requirement, who can change them before saving.
- Your personal phone with work email is lost. What do you do?
- Buy a new one and say nothing
- Report it to IT immediately so work data can be wiped
- Wait a week
Use it
#Edit a Confluence page, insert the Attestation Flow macro, open the requirement editor and pick the pack under Start from a policy pack. It fills the note and the due date; with a paid licence it also fills the re-acknowledgement window, the minimum reading time and the quiz, and can add the starter text to the page. Required readers are never preset: you choose them.
Related
#- Attestation Flow for Confluence documentation
- Confluence policy templates: all 16 templates