Half of companies have no mobile device management policy