I'm a BES admin and I also do all the carrier maint.. when a new user get's a BB, sometimes I've got some rocket scientists that decide to follow the prompts and setup their account on BIS..

Or worse, a user has their own personal BB and sets themselves up on BIS.. On BES, I can remotely wipe.. can this be done on BIS via me calling into teh carrier? or is BIS unmanaged.

You cannot manage a device via BIS.
Even the carrier cannot remotely wipe a BIS device.

Could block BIS server IP's so they cant set it up.