MDM
acronymIT supportsecurity
Mobile Device Management: enrolling phones, tablets, and laptops under central policy - configure, patch, locate, and wipe from one console.
The truce line of BYOD: your device, the company's rules on the work part of it.
Mobile device management enrols devices under a policy that can enforce encryption, require a passcode, push configuration and wipe remotely. On corporate-owned hardware that is straightforward; on personal devices it is a negotiation, because the same capabilities that protect company data also reach the owner's life.
The distinction that resolves most of it is between managing the device and managing the workspace. Application-level containment separates corporate data into a space that can be wiped independently, which gives the organization what it actually needs and leaves the rest alone. Deployments that skip that distinction generate resistance that is entirely rational, and the predictable outcome is people routing work through personal accounts the policy cannot see at all.