If the phones are owned by the business, the MDM endpoint software that includes tracking, locking, and wiping utilities will already be installed when they are issued to the employee. So, the presence of MDM controls is not obvious. However, it is a good practice to make a usage agreement with the employee before handing over the phone and that should detail permitted usage, rights, and obligations. When a user-owned device is added to the corporate network, the user will need to install an app and that process will include a consent screen that needs to be agreed to before the access software is loaded. This will include details of what the business can do with the employee’s phone.