Let's not talk about security...but number 2...
...is about security. I guess it really is not possible to discuss BOYD without talking about security, because security is the 800lb gorilla amongst BOYD issues.
However, if you have the ambition to attempt to make a list of non-security-related issues, a little organization of thoughts would have helped: you could have started at the beginning with Procurement, then Ruggedized hardware, then Long range vendor plans, then Maintenance, then Applications, then Updates/Patches, then Data Ownership, and follow accordingly, almost chronologically in terms of the point at which an issue would present itself.
I can appreciate having to move at the speed of business, and the democratizing effect of the interweb and all that, but we clearly have not outlived the need for proper editing.
