Developing a NATO BYOD security policy