According to this survey, the top security issues includes the use of privately owned devices and deployment of new mobile platforms. Gartner recommended focusing on mobile data protection (MDP), network access control (NAC), and mobile device management (MDM) tools. Survey results also indicate enterprises are providing support for BYOD programs, offering technical support for 32 percent of smartphones, 37 percent of tablets and 44 percent of laptops. However, the report noted that support varied greatly by region. Mature countries consider BYOD programs as bringing with them both legal and technical issues, whereas emerging countries only see technical issues. For instance, mature regions are more concerned with security and data privacy regulations for immature MDM than emerging regions.
Organizations can have tight control over company issued smartphones, tablets or laptops. However, there is little or no control over privately owned devices. When employees install apps on smartphones or tablets an at the same time connect with work PC for sync, there is a risk that the downloaded app may infect the entire network. A study found that only 10% users auto-lock their smartphones or tablets with password protection. Only one in four secure the personal smartphones they use for work, and only one in three adequately protect their laptops. More than 50% of employee’s personal devices are unsecured, lost phones, laptops, and tablets constitute a significant data breach risk.
Corporations that allow 'BYOD' should implement a strict BYOD policy to help IT staff manage these devices and ensure network security.
What is the difference between personal and employer issued mobile devices?
Mobile devices provided by your employer requires a “company mobile liability policy.” This means they not only provide and pay for your mobile device, they also dictate what you can and can’t do on the device. In most of the cases, the employer may have remote capabilities to monitor activity and, in the event of loss or employee termination, wipe the data.
“Employee mobile liability policies” are for employees who prefer to BYOD. While these employees may pay for their own devices and their monthly data plans, but the same restrictions can (and should) be imposed on employees who use personal devices at work. If employee chooses to use personal device for work purposes, at any time, for any reason, the employer will more than likely want control over that device. This means that, again, the employer may have remote capabilities to monitor activity wipe employee's device’s data if it is lost or you resign or are fired.
In both situations, the employer will be liable for leaked data. So if employees choose to BYOD, they should be prepared to give up some liberties.
