Accessing 'Work' Data on personal devices

[Rundc]

I've inherited a google school and reviewing controls in place for Staff using personal devices to access work data (specifically google workspace)

 

We have all sorts of polcies in place around what Staff should do like making sure the device is encrypted and on a supported OS verion with latest security updates etc.

 

What technical controls have you implemented to secure data even further i.e. wiping accounts when staff leave and how do you achieve this?