Your IT director really needs to do his homework. You can issue your employees iPhones and enforce password policies and many other settings through freely available software from Apple.
Even without Configurator, you can use Exchange Server's ActiveSync polices to enforce mandatory phone passwords and such.
Someone with the job title of IT Director really has a responsibility to stay on top of technology trends and of course be familiar with the capabilities of the enterprise software already deployed.
