5 steps to managing employee-owned cellphones at work.

• Position: Nuts & Bolts

1. Require the installation of adequate IT protections. Demand that employees load an approved security package to any personal device they will connect to the corporate network. Plus, require them to activate their devices' security features, including encryption, password protection and automatic lockdown.

2. Get consent to issue a "kill" command. If an employee's smartphone is lost, your organization's data could be at risk. A kill command sends a remote signal to wipe clean the phone's memory. You need to obtain written consent first and have staff sign a waiver.

3. Get consent to access the device for legitimate business purposes. You may need to access the phone, for example, during an investigation or litigation hold. Notify employees up front that refusing to comply with a reasonable and legitimate request for access to information stored on a personal device could...