When employees use their organisation's smartphones and tablets privately, it immediately creates several problems for the organisation's information security. For example, a user might independently install apps containing malicious functions or visit a website that infects their device with malware. Many apps installed privately by users are also a risk to the organisational information stored on their devices because they can access address books and send them to unknown servers, for example, or gain direct access to e-mails or documents. This could result in data leaks, or in data entering an organisation in an uncontrolled manner. Typical examples of apps that entail such risks are those used for social media and instant messaging.