[Vipergrün]

Scott is dead on. Mobile is the fastest growing sector. Those devices should be controlled while on your network and allow them to wiped if compromised. It appears more and more exploits will be attempted via mobile devices. I assume you have to deal with HIPPA compliance. I'd recommend putting something about compliance, take away admin privileges, manage passwords, perimeter security, etc. The dangerous people are on the inside.