Bring Your Own Device

Purpose

This policy outlines the rules and regulations for using personally-owned devices for work-related purposes at Cadence OneFive. The policy aims to protect the security and integrity of the company’s data and technology infrastructure while allowing employees the flexibility to use their own devices.

Scope

This policy applies to all employees, contractors, and temporary staff who use their personal devices to access company networks, systems, or data.

Policy Statement

Cadence OneFive recognizes that employees may prefer to use their own devices for work-related tasks. The company allows this practice under the following conditions:

Device Registration

Employees must register their personal devices with the IT department before using them for work purposes. The IT department will maintain a list of approved devices and their owners.

Follow the Windows, Linux, and macOS setup guide, Android work-profile guide, or iPhone and iPad guide. IT must complete Apple Business setup before inviting iPhone users to enroll.

Security Requirements

Operating System Updates

Employees are required to apply all available operating system patches on at least a weekly basis. Automatic updates should be enabled.

Antivirus Software

Employees must set up and run antivirus software on their personal devices used for work. Cadence OneFive will purchase antivirus software for the employee if necessary. Antivirus software must be kept up-to-date at all times.

Device Security

Devices must be password-protected with a strong, unique password. Devices must be configured to lock automatically after a maximum of 5 minutes of inactivity. Where available, employees must enable two-factor authentication for accessing company resources.

Data Protection

Company data must not be stored on personal devices unless absolutely necessary and approved by management. If company data is stored on a personal device, it must be encrypted. Employees must use company-approved cloud storage solutions for storing and sharing work-related files.

Lost or Stolen Devices

Employees must immediately report lost or stolen devices to the IT department.

Acceptable Use

Personal devices used for work purposes are subject to the company’s Acceptable Use Policy. Employees must not use personal devices for work purposes in a manner that violates any company policies or applicable laws.

Support and Maintenance

The IT department will provide limited support for personal devices used for work purposes. Employees are responsible for backing up their personal data and maintaining their devices.

Separation from Company

Upon termination of employment, employees must allow the IT department to verify deletion of all company data from their personal devices.

Separation from Company and Retirement / Replacement of Devices

Upon retirement or replacement of devices, or at termination of employment, employees must allow the Company to verify deletion of all company data from their personal devices with access to company systems or data. For non-functional devices that cannot be powered on to perform the verification, employees must follow instructions to securely erase data by alternative means.

Policy Compliance

Failure to comply with this policy may result in disciplinary action, up to and including termination of employment.

Policy Review

• This policy will be reviewed annually and updated as necessary to reflect changes in technology, business needs, or regulatory requirements.
• Last reviewed/updated: 2026-08-25