The Christmas holidays are one of the peak seasons for device thefts (laptop, tablets and mobile devices). Burglaries from homes and cars always spike around this time of year, when thieves know new devices are being given and received. Opportunistic thefts also see an increase, from people carrying their shopping bags, looking at their devices while rushing around out shopping, or enjoying themselves at a party or restaurant.
The proliferation of the BYOD trend means that many of us are out there this holiday season with devices that have a mix of both personal and corporate data. Should these devices go missing in all the commotion, it can leave a business vulnerable to data attacks and cybercrime threats.
I recently wrote a series of articles on the "Security nightmare before Christmas" for sites such as Business Zone, Professional Security, Business2Community, and CBR Online. In these articles, I lay out the impact a missing device can have on a business, as well as the importance of protecting corporate data.
With mobile thefts rising dramatically, with more than 800,000 stolen this year alone in the UK, and a greater number of people out socialising and using public transportation (the main hotspots for theft), mixed with the distractions of the holidays, businesses face a very real threat from smart device users this Christmas.
Although a business would hope its employees protect their smartphones and data from being compromised, this is not always the case. Recent findings from Juniper Research identified that more than 80% of the total enterprise and consumer owned smartphone device base will remain unprotected through 2013. Even simple forms of mobile security are being neglected; a shocking 51% of UK adults don’t even use passcodes like pin numbers, leaving data stored on the device or accessed through cloud apps at a maximum level of vulnerability. This goes to show that businesses cannot rely on employees to secure their own smartphones, which is a very real concern when corporate infrastructure and data is accessed through them on a daily basis.
A stolen smartphone has quickly moved from a temporary hassle and inconvenience to having the potential to compromise the security of an entire business. The ramifications are also financial – since the Information Commissioner’s Office (ICO) raised the maximum fine for a security breach to £500,000, businesses can no longer afford to be complacent over a stolen or missing employee smartphone. Not only can the loss of information affect the reputation and integrity of a company, impacting working relationships and future prospects, but it also has the ability to cripple a business financially.
As the cost of smartphones continues to decrease and with the threat of fines looming, businesses should focus on protecting corporate data contained within employee smartphones and other mobile devices, like phablets and tablets. Every one of these devices is a portal into corporate infrastructures and the data held within it, so it has never been more essential to put into place a system to control and protect data contained within a device. However, rather than grappling with the numerous manufacturers and OS systems used by devices, IT decision makers should try to consolidate the management of devices using software solutions such as Absolute Manage. Absolute Manage can provide the visibility and flexibility to comprehensively secure different devices and applications, providing IT managers with the support required to embrace this era of BYOD. Ideally, this will enable both personal and corporately owned devices to exist in one single environment, allowing the implementation of robust security policies across the board.
Management of corporate smartphones will also help in the combat of cyber threats, which are now increasingly targeted towards mobile devices by cyber criminals moving away from traditional PC hacking. While innocently making gift purchases or downloading Christmas themed apps, employees could potentially allow hidden malware to gain access to their smartphone. Unprotected websites may be hot sports for cyber-crime and downloaded apps may be corrupted, putting the smartphone under further risk. Not only does malware have the capability to steal data from this seemingly secure device, it could also have access to data stored on the corporate infrastructure. By utilising a management system such as Absolute Manage, IT leaders are able to monitor what apps are installed onto the device and locate and remove potential threats and unauthorised software.
Christmas is a time when employees can be distracted by the festive atmosphere, and rightly so; it is a time to relax and celebrate with friends, family and colleagues. However, absent mindedness while out shopping, socialising or travelling home is sometimes unavoidable and can often lead to a stolen or missing smartphone. Equally, a quick online payment or downloaded app could accidentally subject a business to a cyber-attack and consequential data breach. A savvy business should assess and understand external influences on their organisation; the busy Christmas period coupled with the rise in smartphone thefts and mobile cyber-crime demonstrates the need to be proactive in implementing an effective security policy for endpoint devices. When you get it right, it’s as simple as ‘track, manage and secure’ for the devices and information, within and outside of your business.