If your company does not have a structured approach to handling employee devices, it is worth considering whether the risks outweigh the convenience.