Mobile Device Security: Bring Your Own Device (BYOD)

Published

September 28, 2023

Author(s)

Gema Howell, Katie Boeckl, Nakia R. Grayson, Naomi Lefkovitz, Jason Ajmo, R. Eugene Craft, Milissa McGinnis, Kenneth Sandlin, Oksana Slivina, Julie Snyder, Paul Ward

Abstract

Many organizations provide employees the flexibility to use their personal mobile devices to perform work-related activities. An ineffectively secured personal mobile device could expose an organization or employee to data loss or a privacy compromise. Ensuring that an organization's data is protected when it is accessed from personal devices poses unique challenges and threats. Allowing employees to use their personal mobile devices for work-related activities is commonly known as a bring your own device (BYOD) deployment. A BYOD deployment offers a convenient way to remotely access organizational resources, while avoiding the alternative of carrying both a work phone and personal phone. This NIST Cybersecurity Practice Guide demonstrates how organizations can use standards-based, commercially available products to help meet their BYOD security and privacy needs.

Citation

Special Publication (NIST SP) - 1800-22

Report Number

1800-22

NIST Pub Series

Special Publication (NIST SP)

Pub Type

NIST Pubs

Download Paper

https://doi.org/10.6028/NIST.SP.1800-22

Local Download

Keywords

mobile device, bring your own device, mobile device security, mobile device privacy

Citation

Howell, G. , Boeckl, K. , Grayson, N. , Lefkovitz, N. , Ajmo, J. , Craft, R. , McGinnis, M. , Sandlin, K. , Slivina, O. , Snyder, J. and Ward, P. (2023), Mobile Device Security: Bring Your Own Device (BYOD), Special Publication (NIST SP), National Institute of Standards and Technology, Gaithersburg, MD, [online], https://doi.org/10.6028/NIST.SP.1800-22, https://tsapps.nist.gov/publication/get_pdf.cfm?pub_id=956246 (Accessed October 13, 2025)