Here are some policies CIOs are using to get ahead of the wave of personal mobile devices:

-- Connectivity. Nothing will be connected to the network without the approval of IT.

-- Approved equipment. IT provides a list of approved devices and software. Others will not be supported.

-- Desktop standards prevail. Mobile policies mirror desktop policies where appropriate. For example, if laptops automatically log out users after 20 minutes to prevent theft or fraud, mobile devices will be programmed to do the same.

-- Disabling mechanisms. Mobile gadgets will be fitted with disabling mechanisms that can be remotely activated in case of loss or theft.