1. Is the ownership attributed to the company or classified as personal use?2. What are the legal implications?3. How does IT governance apply here?4. Can the company revoke access?