At Microsoft, employee job satisfaction and productivity have soared as employees utilize personal devices for work and personal use. Microsoft IT is transitioning from managing hardware to managing users' access to the corporate network and its intellectual property. To do this, Microsoft IT developed a strategy in which it supports a hybrid environment of Windows and non-Windows devices. Depending on the security of a device, and an employee's credentials, Microsoft IT can control access to data based on the security classification of the data: high impact, moderate impact, or low impact.

We recommend that IT departments develop a framework that balances business value and risk mitigation. We've defined trustworthy dimensions, and we apply that framework to create policy of what devices and social applications we'll embrace, allow, contain, and block from employees.