Bring-your-own-device policies must be frequently updated because of new risks, such as mobile malware, says Jim Pitts of BITS, which has developed best practices for BYOD in banking.