Let's dig a huge gaping hole into that infrastructure with a VPN and BYOD. And when it doesn't work, blame IT support for not properly supporting my dusty old W

Let's dig a huge gaping hole into that infrastructure with a VPN and BYOD. And when it doesn't work, blame IT support for not properly supporting my dusty old Windows XP installation. Sure. What you want is separation, though for real work it quickly becomes impractical. So there are special rules for something, and suddenly, everybody are running on those not-so-special rules anymore. IT security is still mostly about people and awareness at this point.