... the employee owns the device, but the company has management rights on the device and this can create complications when the company wants to wipe data on the phone.
"Some companies will wipe the device unilaterally. They watch the device behaviour on the network and if they think it's doing something funny - like it normally appears every day and it hasn't for three days - they'll just wipe it when they next see it as a precaution in case it has been stolen," Jones said.
"On the other hand, some people have been told by their lawyers that you shouldn't do this even if the employee signs a bit of paper that says you can wipe it because you don't know how much value you're wiping. You don't know how much he has spent on iTunes or if he's got irreplaceable pictures of his kids on there or something like that.
"Those sorts of issues need to be worked through because if you get them wrong you could end up in court," he added.
Insurance companies may also need to be contacted as Jones said some insurers may feel the organisation is more open to risk if workers are using their own devices.
10. Set out responsibilities
Finally, all stakeholders should be aware of their responsibilities towards the device and the data kept on it.
"It is important for everyone to understand their responsibilities in the sense that all device management is a bargain between the employee and the enterprise - everybody gets something and everybody concedes something," said Jones.
"It's a good idea to have some sort of written contract with the employees so the employees understand what their rights are," he said.
"[Employees should know] if they're responsible for backing up the device, if they're responsible for obtaining the device in such a way that if it breaks or if it's stolen they can get another one within a couple of days so the business process isn't compromised."