That's the other choice: Focus on the users. I believe it's the right choice because, in the end, you sink or swim with your users. You need to bring them into the loop and work with them, not dictate to them. There are two pieces to this strategy.
First, you need to focus on educating your users. What are the things they should be doing? What shouldn't they be doing? (This should be part of your policies as well.) What sorts of situations might they get in that would be dangerous either for them or for the company related to the data they use?
Remember, if it's their own device, it's not just corporate data that lives on it but their private data as well, which gives them an incentive to protect all the data on it. They're not trying to be unsafe with the data; they're just trying to get things done the best way they can. Teach them how to do just that and at the same time build good habits that keep everyone's data secure.
This leads to the second part of your strategy. You have to focus on the user needs, what I call the Fun Principle. There's a reason your users have moved corporate data to their device. Figure out what they are doing with the data and why they need it. Look at what apps they use with the data. Chances are your users found the best apps to enable themselves to get their work done. They just want to be able do their job as quickly as possible, so they can spend more time with their families.
Use the work they've already put in, then build on it. If they are using Dropbox to move their data around, figure out if you can find a way to allow them to do that securely. If you can't, work with them to find an alternative that's just as frictionless for them but that you can secure. If they are using Evernote to take notes, maybe the business has to buy a subscription to the Pro version and have users encrypt the data. Concentrate on what your users have already figured out and use that knowledge to enable them securely while keeping the experience as frictionless as possible.
The goal is use mobile to enable your users to be more flexible and agile, which allows them to be more productive and efficient. You do this through education and fun, hopefully leading your users to a frictionless experience. The BYOD genie may already be out of the bottle, but you get to decide (apologies to singer Keri Hilson and rapper Kanye West) whether it's dessert or disaster.
This article, "BYOD is a four-letter word for too many," originally appeared at A Screw's Loose and is republished at InfoWorld.com with permission (© Brian Katz). Read more of Brian Katz's The Squeaky Wheel blog at InfoWorld.com or at A Screw's Loose. For the latest business technology news, follow InfoWorld.com on Twitter.