We will be hacked soon thanks to a loose BYOD policy

Posted by IronHitmonlee@reddit | sysadmin | View on Reddit | 641 comments

Long story short, the CEO of a company I work for (for now) fired all the infosec staff (2 people) and now as soon as he did that he wanted to implement a BYOD policy which I said is a terrible idea. I’ve mentioned that it would be difficult to stop accidental or intentional downloading of data, if they have viruses on their phones they can infiltrate the company. How do I make the policy so tight that no one will want to use a personal phone (I know some still may try without adhering to it but at least that way it’s their fault for not being complaint). If anyone has any examples or templates they can share that would be great. The boss in question was hacked previously and still wants to go ahead with this is, and he tends to blame whoever he can even if they have no involvement in an issue. I’ve chosen to stop saying no directly to him because I’ve realised I could have been fired for this after seeing they way he has treated other staff and of course… he is friends with the CEO and CFO. And yes resumes have been flying and I may leave soon but just in case I stay I want to have a plan B.