PURPOSE
The purpose of this Bring your own device policy from TechRepublic Premium is to provide requirements for BYOD usage and establish the steps that both users and the IT department should follow to initialize, support and remove devices from company access. These requirements must be followed as documented in order to protect company systems and data from unauthorized access or misuse.

From the policy:

IT DEPARTMENT RESPONSIBILITIES
Where applicable, the IT department will ensure the following to facilitate BYOD access as requested for a user device:

• Compile a list of authorized devices to be used for BYOD purposes. This includes smartphones, tablets, laptops and other electronics. Specify the make and model of devices that will be allowed for business usage and provide that information to users. Make it clear that ONLY these particular devices will be allowed to be used for BYOD.
• The device is properly protected against malware infections via working anti-malware software, which is routinely updated and used to scan devices. Further, confirm that the device does not have a virus, spyware or malware infection.
• Devise a list of approved and unapproved apps and provide these to users with the stipulation that approved apps will be available for use, but unapproved apps must not be installed as long as the device is used for company purposes.