Ashim Pal, a vice-president at Meta Group, said purchasers and their IT counterparts had been slow to set up a policy covering such devices, which are owned by a growing number of people.

"When faced with orders for phones from employees, purchasers should let senior management know there are security issues," he said.

"Many employees have them as part of...