A new corporate policy requires that all employees have access to corporate resources on personal mobile devices. The information assurance manager is concerned about the potential for inadvertent…

Placing corporate applications in a container via MAM or MDM containerization creates an encrypted, isolated partition for corporate data that can be selectively wiped without affecting the user's personal content if the device is lost. This directly addresses the information assurance manager's concern about data disclosure because only the container and its contents are exposed in a loss scenario. It also resolves user concerns about corporate overreach because the company cannot access or wipe personal photos, apps, or communications stored outside the container.

Geolocation helps locate a missing device but does not prevent unauthorized access to corporate data stored on that device.

Remote wiping erases the entire device including all personal data, which intensifies rather than resolves user concerns about corporate overreach into personal information.

A VPN secures corporate data in transit between the device and internal systems but provides no protection for data already stored locally on the device if it is lost or stolen.