Plan Deployment Informational Campaign
A crucial step for Device Control deployment is communicating the product's roll-out to your organization. Inform your employees that you are changing how they can interact with their devices.
Why Do I Need an Informational Campaign?
Your users are probably accustomed to unlimited access to their personal devices while using their endpoints—they likely connect their smart phones and USB flash drives without considering security. Although this use isn't malicious, it does introduce security risk. If you plan on blocking device access that users are accustomed to, an information campaign targeting your employees will help your Device Control deployment succeed.
What Info Should the Campaign Include?
At a minimum, we recommend including the following information in this campaign:
- Clearly state your security policy. Inform users of the rules that are being enforced.
- State why the security policy is being introduced. Examples might be:
- Protecting the organization from malware introduced by unapproved devices.
- Protecting lost or stolen data using a device encryption policy.
- Protecting the organization from regulatory fines and lawsuits.
- Inform users how to request permissions for special circumstances.
- Encourage users to ask questions.
Your organization may have its own specific reasons for introducing the security policy. Be sure that your information campaign includes them.
How Should I Communicate This Info?
Use a variety of different mediums, such as:
- Emails
- Company newsletters
- Posters in common areas
We recommend sending follow-up messages that communicate progress about the Device Control deployment. Let your employees know how the project is progressing. If you are open with your communications, employees are less likely to see your security policy as restrictive.
We also recommend recruiting an executive sponsor to support the deployment. If company employees see that leadership is endorsing the project, they are more likely to embrace it.