3 ms·
Employer-managed devices are crap, IMHO. Pay your employees well enough that they can buy their own devices; trust your employees to secure their work assets, a
by daviddever23box 5y ago
Employer-managed devices are crap, IMHO. Pay your employees well enough that they can buy their own devices; trust your employees to secure their work assets, and make SecOps training first-class. Everything else is flushing cash down the toilet.
If you can't trust your employees, you are either a psychopath or have poor employee acquisition hygiene.
- tdeck 5y agoIf an employer expects me to install a device policy on my phone, they should buy me a second phone. That said, this comment established a false dichotomy between trusting your employees and doing defense in depth. Following your logic, employers that require two-factor auth must either be "psychopaths" or have "poor employee acquisition hygiene" because they don't trust me to use a unique password and avoid getting phished. Trusting someone doesn't mean being certain that they will never make a mistake.
- dyeje 5y agoThis isn't viable for businesses that need to comply with SOC2, ISO27001, etc.