These guidelines are intended to provide support for organisations that plan to allow smart phones, tablets or other mobile devices to connect to the organisation’s internal resources and want to achieve this as securely as possible. The challenges are present to a large extent in education, management, regulatory frameworks and technical implementations for protection. These guidelines provide recommendations on what your organisation should regulate in the regulatory framework and procedures, what requirements should be imposed on the users and the technical protection that is recommended when mobile devices are allowed to connect to your organisation’s internal resources.