BYOD allows employees to use personal devices for work. Risks: corporate data on unmanaged devices, no control over OS patches, mixing personal/corporate data, device loss.
Controls: MDM (Mobile Device Management) for full device management, MAM (Mobile Application Management) for just corporate apps. Remote wipe, certificate-based auth, containerization separate personal/work data.