End user device security guidelines