"You want to know who's peeking over the shoulder, who's taking screen shots and emailing them to friends," Freimark told me during a discussion about the . "You can't really lock this down today. You want to be able to wipe one app at a time, or maybe business apps. Employees are not going to like it if you wipe the whole device."

With iOS 5, mobile device management vendors gain more control over the dreaded data wipe. If users delete the mobile device management profile on their devices, IT can force a selective wipe of corporate data that includes email, calendar, contacts and enterprise apps, MobileIron says.

Then there's the gaping iCloud security hole in the sky. In addition to iOS 5, Apple launched its iCloud storage service. Imagine sensitive corporate information stored in iCloud that is tied to an employee's personal account.

With iOS 5, though, IT can turn off iCloud autosync so that device-side data is not synced to iCloud. "IT can now disallow apps from syncing with iCloud or iTunes," MobileIron says.