Managerial Controls for Device Security