BYOD Asset Discovery: How to Track Personal Devices That Reach Company Data

Описание и применение

Процесс выявления BYOD‑устройств позволил компании перейти от 300 записей до 187 активных персональных устройств, 142 из которых полностью контролируются, и 31 с подтверждённым владельцем, обеспечив прозрачность для аудиторов.

Задача

A security questionnaire asked how many personal devices can access customer data, but the asset inventory only listed company‑owned laptops, leaving auditors uncertain about BYOD access.

Результат

The process turned a noisy identity record set into a clean, accountable inventory of personal devices, enabling compliance with the security questionnaire and establishing a repeatable audit trail.

Рабочий процесс

• Decide which company data puts a device in scope
• Pull device evidence from identity, MDM, mailboxes, and network scans
• Clean the list: merge duplicates, match scan results, mark stale, flag shared
• Sort every device: Seen, Attributed, Accountable
• Choose control levels based on data access
• Build lifecycle triggers for ongoing updates

Доказательства

The team ended up with about 300 device entries. The asset sheet had 118 laptops.

Источник

After two weeks, the team's 300 raw entries came down to 187 active personal devices.

Источник