Which of the following is the MOST important consideration in a bring your own device (BYOD) program to protect company data in the event of a loss?