‘Security Is Not My Responsibility’ According to Enterprise Workers Polled in Absolute Software Research
The Value of Corporate Data on Mobile Devices is Significantly Underrated by Enterprise Employees
Vancouver, Canada: March 5, 2014 – Absolute® Software Corporation (TSX: ABT), the industry standard for persistent endpoint security and management solutions for computers, laptops, tablets, and smartphones, today announced the results of the 2013 Mobile Enterprise Risk Survey. The survey polled workers in companies with 1000 or more employees who use mobile phones for work within diverse industries, including banking, retail, healthcare, and energy. The poll focused on the state of bring-your-own-device (BYOD) policies within these organizations and the current sentiment of workers regarding responsibility and compliance for corporate data contained on mobile devices.
Key US findings of the 2013 Mobile Enterprise Risk Survey include:
It's not my problem When asked about appropriate penalties if they leak or lose company data, one-quarter (25.2 percent) of American enterprise workers surveyed said there should be no punishment since data security is not their responsibility.
It's not a big deal While 75 percent of respondents felt that they should face some penalty if they lost corporate data, many of those who had lost a device with work data on it said their punishment ranged from ‘nothing’ (34 percent) to simply having to replace the device (30 percent) or getting a ‘talking to’, but nothing else (21 percent).
I didn't know About one quarter (23 percent) of respondents indicated that they do not know their company's procedure for dealing with work device loss or theft. Also, 10 percent of respondents indicated that their employer is not looking to introduce a procedure for the loss or theft of work devices.
It can't happen to me again More than one third (35 percent) of respondents who had lost their mobile phones stated that they did not change their security habits afterwards.
It's just a phone Nearly two thirds (59 percent) of enterprise mobile users estimated their corporate data to be worth less than $500.
As the use of mobile devices continues to increase in the enterprise, these survey results indicate IT is still facing many challenges implementing and enforcing mobile-use guidelines. Although employees may feel the data on their device is only worth $500, when you consider that most data breach penalties can range into the millions of dollars, there's an obvious disconnect between an employee's perception and the risk to the organization.
“If firms don't set clear policies that reflect the priority of corporate data security, they can't expect employees to make it a priority on their own,” said Tim Williams, mobile enterprise data expert and Director, Product Management at Absolute Software.
The lax attitude of workers towards securing mobile devices and the data they contain, even after device loss or theft, places enterprises and their sensitive data in a vulnerable position.
“The data may be carried around in the employee's pocket, but the half million dollar fines we've seen levied due to data loss come out of the company's pocket,” said Williams. “Clear policies, properly articulated to employees, will ensure that the entire company, not just IT, unites against mobile data loss.”
Absolute empowers more than 12,000 customers worldwide to protect devices, data, applications, and users against theft or attack — both on and off the corporate network. With the industry’s only tamper-proof endpoint visibility and control solution, Absolute allows IT organizations to enforce asset management, security hygiene, and data compliance for today’s remote digital workforces. Absolute’s patented Persistence®technology is embedded in the firmware of Dell, HP, Lenovo, and 22 other leading manufacturers’ devices for vendor-agnostic coverage, tamper-proof resilience, and ease of deployment. See how it works atwww.absolute.comand follow us at@absolutecorp.
This press release contains forward-looking statements and financial outlook that involve risks and uncertainties. These forward-looking statements and financial outlook relate to, among other things, the expected performance, functionality and availability of the Company’s services and products, and other expectations, intentions and plans contained in this press release that are not historical facts. When used in this press release, the words “plan,” “expect,” “believe” and similar expressions generally identify forward-looking statements. These statements reflect the Company’s current expectations. They are subject to a number of risks and uncertainties, including, but not limited to, changes in technology and general market conditions. In light of the many risks and uncertainties, readers of the press release should understand that Absolute cannot assure them that the forward-looking statements and financial outlook contained in this press release will be realized. Furthermore, the forward-looking statements and financial outlook contained in this press release are made as of the date hereof and the Company does not undertake any obligation to update publicly or to revise any of the included forward-looking statements and financial outlook, whether as a result of new information, future events or otherwise, except as may be required by applicable securities laws.