"The reality is, if you don't have a program in place, your employees are still going to be using their phones and tablets at work," Lofgren said. "You're just not going to have any insight or visibility into it."
Although the ISF is urging companies not to rush into BYOD, that advice may be difficult to heed. "Companies have had no choice with offering BYOD support or access to their employees," said Skybox Security's Vice President, Michelle Cobb.
"The old IT joke about 'How do you protect your employees from the Internet? Unplug it.' can't be applied here," Cobb told CSOonline. "BYOD offers such value to organizations' and employees' productivity, you can't ignore it."
Sign up for CIO Asia eNewsletters.