here is a nice post by penguin3107penguin3107
how much of the device can be seen by the BES Admin?
All of it.
Are all the device settings exposed?
Yes. IS the model number of the device available?
BIS email, is that available to the BES admin?
I understand PIN messages just go through RIM
But they're still on the device, and can be logged on the BES. A BES admin can see the content of your PIN and SMS messages.
but what about data from third party apps and web site traffic?
Depends on the app... but web traffic can be logged at the BES as well.