Policy allowing employees to use personal devices for work. Requires careful balance between security controls and user privacy.