Why can my IT department lock or unlock my phone?
Your IT department can choose to set a policy that will allow it to lock or unlock your phone. Typically, when a phone is used for work email and apps, the security best practice is to make sure the phone is “locked” by means of a  passcode. This protects against data loss if the phone is lost or stolen. With MobileIron software on the phone, the IT department can unlock the device if you have forgotten your passcode (assuming that they’ve confirmed your identity). In case of a lost or stolen device, the IT department can also quarantine the device (to prevent loss of corporate data) or, in extreme cases, remotely wipe the device.