Hello Patrick
Thank you very much for your answer.
I'll take this information to our IT department.

Hello Christian. It is possible to create different profiles on the phone and activate only one of the two SIM cards in each profile. It is also the case that access to the calendars/emails/files etc. of the respective profile cannot be accessed from the other profile without logging in with it. However - on the subject of the security patch - it is the case that the profiles are based on a user administration. The operating system is therefore shared by all profiles. If an update (e.g. security patch) is applied to one profile, the operating system is updated and with it the other profile. Likewise, if the end device is centrally administered (which is regularly the case when it is used in administered domains), an administration programme with root rights is installed on the company profile (usually when setting up the mail accounts via G-Suite Business, Microsoft Exchange or similar), which enables the administrator to locate, lock and/or reset the phone to factory settings at any time. So, if the worst comes to the worst, all the data on the phone is lost. I hope I could help you with the answer. LG Patrick