Personal smartphones and laptops have long been integrated into corporate infrastructure. According to Crosstech experts, up to 90% of employees at Russian organizations use their own devices for work-related tasks. At the same time, approximately 70% of companies implement BYOD programs with critical errors, exposing themselves to data leaks and other cyber incidents.
The concept of Bring Your Own Device appears attractive at first glance: businesses save on hardware purchases while employees work on familiar equipment. Problems arise when organizations choose one of two extremes. The first is a completely permissive approach with no rules, restrictions, or data separation. An employee might download a work contract to a smartphone, edit it at home in the evening, and then leave the device in a taxi the next day. The same gadget could be handed to a child who installs questionable games, potentially compromising corporate data along with it.
The second extreme involves transforming an employee’s personal laptop into an extension of the security department. The company installs monitoring software that tracks user actions, which employees often perceive as surveillance. This frequently produces the opposite effect: documents migrate to personal messengers, unauthorized cloud services, and other unofficial platforms. The result is shadow IT that the organization can no longer control.
Crosstech recommends avoiding full-device monitoring and instead separating work and personal spaces. On smartphones, corporate data can be placed inside an encrypted container that can be wiped independently if needed. For home desktops, companies should provide secure access through isolated virtual desktops without direct connections to the internal network.
“Companies should care only about how their data is processed, not about what a person does in their free time on their own device,” noted Egor Norkin, Information Security Architect at Crosstech.
