Despite the rise in the use of personal devices for business use, U.S. consumers are showing scant concern for security when it comes to bring your own device (BOYD). According to a recent survey by Gartner, Inc. (www.gartner.com) a quarter of business users admitted to having had a security issue with their private device in 2013, but only 27%of those respondents felt obliged to report this to their employer.
The survey was conducted in the fourth quarter of 2013 with 995 full or part time workers in the U.S., all of whom use a private device for work purposes.
In a blog post, Meike Escherich, principal research analyst at Gartner, said that employee use of private mobile devices to access corporate information and services is exploding and with this trend comes a series of potential drawbacks.
“The threat of cyber attacks on mobile devices is increasing and can result in data loss, security breaches and compliance/regulatory violations,” she says. “One of the biggest challenges for IT leaders is making sure that their users fully understand the implications of faulty mobile security practices and to get users and management to adhere to essential steps which secure their mobile devices. For many organizations, overcoming BYOD security challenges is a full-time task, with a host of operational issues.”
Nearly half of the survey respondents said they spend more than one hour each day using private devices for work purposes. The data also suggests that around half of respondents regularly use their devices for social as well as productivity tasks. This has different implications. It might point to employees considering their personal devices as necessary tools for their jobs.
On the other hand, notes Escherich, it also points to work-related documents regularly being transferred to private devices, leaving the security of the company network. In fact, 20% of respondents also stated that they do access data behind the workplace firewall using private devices.
Whatever the activity and the duration, any work activity on a private device inherently carries the threat of a security breach. That leaves IT organizations scrambling to come up with the right mix of mobile security defenses to balance protection, governance and user flexibility. Businesses will need help from telecoms service providers (TSPs) to evaluate and implement policies and procedures, ongoing user education, and sourcing and deploying mobile security, encryption and mobile device management (MDM) solutions.
Escherich says the key to having a secure device is making sure it is well-managed. Enterprises are being compelled to make decisions about whether or not to allow employee-owned devices to access their enterprise’s network and information.Failure to embrace BYOD will force it underground and into the shadows, where it will have the potential to publicly expose private data and open the enterprise to a data breach situation.
In the Gartner survey, 26% of respondents said their employer required use of BYOD devices and 15% had signed a BYOD agreement. A third of respondents have employers who are aware but don’t have a policy in place, and the rest said their employer was either not aware or they didn’t know. This means 59% of survey respondents who regularly use their private devices for work have not yet signed a formal agreement with their employer.