Page 50 - Payout Magazine Online Volume 9.3

will need to have more stringent security
protocols applied to them.
Devices which are used internationally will
also be required to comply with the security
laws and regulations in the countries where
they will be operated. As an example, the
EU has recently implemented strict privacy
policy legislation which could impact a BYOD
while the employee is traveling between
borders.
Securing Portable Devices
Against Malicious Use
The number of different brands, models,
and the capabilities of mobile devices has
grown considerably in the last decade and
poses a challenge to organizations wishing
to secure every device against malicious
use.
The task is made that much more difficult
when personal devices are created which
don’t take into account the tasks they will
be required to perform in an enterprise
environment. Compounding the problem is
that most employees will own more than one
device.
Every year there are millions of smart
devices, misplaced, lost, or stolen and every
year the number of devices accessed for
their data is growing. Criminals realize that
smart devices they can access may contain
much more value than their physical cash
equivalent.
The fact that these devices can so easily
fall into the wrong hands necessitates a
BYOD policy which enforces the use of a
complicated password beyond a simple PIN.
Newer devices with fingerprint sensors and
facial recognition remove the inconvenience
of typing in complicated passwords while
also keeping a device secure.
Securing the Network
A poorly implemented BYOD policy can
be a nightmare for IT managers as they
50 PayOutMagazine
struggle to keep up with rapidly changing
hardware, applications, and network access.
Network monitoring tools will allow IT
teams to closely monitor the system and
keep an eye on the number and types of
devices which are accessing company
resources as well as the location where they
are active. With access to these metrics,
an IT team will be able to improve security
and ensure the infrastructure is capable of
handling the load.
Set Minimum Supported Device
Access
A policy which limits the level of
technology able to access the network will
enhance security. As older phones lose
support for the operating system, hackers
can exploit gaps in the security which will
never be patched. Removing these devices
from the equation limits a hacker’s ability to devices.
take advantage of users who continue to use
outdated technology.
Coping with Always On Data
Access
A mobile workforce with the capability to
work from anywhere at any time has apparent
advantages for improved productivity.
Employees can access corporate data from
anywhere. In return, this poses challenges to
the IT department who must now cope with
higher levels of connectivity and security
holes appearing in social media apps, blogs,
and personal apps.
Lack of awareness paves the way for
malicious access. Employees must receive
continuing support and education so they
are always aware of new developments
which may put their corporate accessed
data and sensitive personal information at
risk.
Protection Against Malicious
Apps
Detailed Mobile Device management
software is critical to every organization
with a BYOD policy. MDM helps to enforce
security protocols for every device brought
into the corporate IT infrastructure and
ensures that only authorized devices can
connect.
MDM software can also provide the
capability to protect against malicious
applications being downloaded. Many
malicious apps are designed to gain access
to a device and from there, piggyback onto a
corporate server. They can also be used to
transmit data such as passwords and credit
card information.
While the Android operating system
accounts for more than 98% of malicious
applications out in the wild, iOS can also
pose problems if jailbroken devices are
brought into the corporate fold. MDMs
enforce a protocol that ensures only trusted
applications can be installed on mobile
Enlisting Encryption
Keeping information secure is
impossible without implementing some
form of encryption. Without encryption, a
smartphone connecting to the local fast
food public Wi-Fi will open itself up to
snooping attempts, where anyone listening
in can hijack the signal and gain access to
sensitive information.
Passwords present one obstacle to
accessing a device, but only encryption will
protect data once it is in transit between
devices.
A BYOD has become an essential policy
for organizations large and small to bring
about increases in productivity, but it is
critical to remain aware of the risks.
The developed policies should be
flexible, measurable, and testable so
they can be adapted to a technologically
evolving workplace and continually make
improvements to the level of protection.