My organization wants to implement an e-mail policy for mobile devices. To be more specific, we want each user that is allowed e-mail access (MS Exchange) on his mobile device to sign a contract that mentions the risk involved if a device is lost or stolen. It should also mention that the IT Department will wipe a device if deemed necessary.
Does anyone have experience with this type of contract? I've been trying to find a contract that has already been written so that it contains the necessary legal jargon in it rather than making one from scratch that might leave loopholes.