Understand risks from personal devices

Editorial update: 21 September 2026. Introductory learning material.

Using a personal device for work can create uncertainty about access, updates, backups and separation of business and personal information. Risks depend on how the device is configured and managed.

• Confirm whether the device is approved for the intended work.
• Check how business data is stored, synchronized and removed.
• Identify who handles updates, loss reporting and access revocation.
• Consider shared-device use and personal applications that may access work files.

Activity: Before using a personal device for work, ask the responsible owner to explain the permitted applications, data boundaries and support arrangements.

Reference: FTC cybersecurity guidance for small businesses. Check the source and your system provider’s current instructions before implementation.