The risks associated with personally owned devices in the enterprise are significant, warrant serious consideration, and are poorly understood. So why are we still having the teenage-esque debate over them when we should be engaging in meaningful dialogue aimed at making decisions in the best interest of the enterprise? Is it that we truly do not understand how to frame the discussion? Is it that we do not have the courage to engage? Anecdotally, it is both (with a little bit of the "rock star CEO intimidates nerdy IT security analyst" sprinkled on top).