Toolkit content - BYOD policy

1 - List of permitted devices: How detailed must the device be described? Is it enough to specify PC, laptop or mobile phone? Or should the exact type designation be given?

Answer: ISO 27001 does not prescribe detail levels for device description, so you can use detail levels that you consider sufficient to fulfill your needs, so either a general description or the exact type designation are acceptable for ISO 27001.

2 - Can you give me examples of mandatory device settings?

Answer: As examples of mandatory device settings we have:
- Use of screen lock with password
- Device encryption enabled