That makes little sense
If not BYOD, it is a company device with only company material, apps, connections allowed.
Kind of like a secure notebook.
Or a blackberry...
If it is that big of a security concern it should not be allowed.
If it is a concern then handle via training, agreements, accountable actions, etc....