Which of the following is MOST important to consider when developing a bring your own device (BYOD) policy?