Companies need to start determining the impact BOYD plays on them and implement appropriate policies that would balance the security concerns, as well as their employees’ requirements, writes CATHERINE BERRY.
It is estimated that, by 2018, there will be approximately 10 billion mobile devices in use globally. The harsh reality is employers cannot prevent employees from utilising their personal mobile devices in the workplace, whether it be for personal or professional use. Further, organisations typically expect a high level of productivity from employees, and the utilisation of mobile devices supports this due to the large degree of flexibility it introduces for the employee. Unfortunately, the issue is exacerbated further by the fact that employees expect the organisation’s information technology to provide support in respect of these devices. What most companies do not understand is that they are in fact liable for the consequences of employees using their own personal devices for work.
Most employees would also be shocked to discover that that their devices may be subject to discovery request in the context of litigation involving their company, and may have to surrender their personal devices (containing browser history and including personal information, photos, etc).
The challenge facing organisations is that this employee IT ownership model, generally referred to as Bring Your Own Devices (BYOD), significantly influences the traditional security model, particularly since these devices are being used to access corporate data. BYOD typically includes end users who provide their own mobile phones, use their personal tablet device at work, or where there are unsubsidised devices required for business utilisation. Organisations now have to determine what the exact impact is, in order to establish appropriate procedures and policies that would balance the security concerns, as well as their employees’ requirements.
BYOD without Borders
In an attempt to establish the organisation’s exposure to BYOD, an exercise should be undertaken to determine exactly what type of data and functionality is being exposed. Consideration should also be given to legislation which may impact hereon, such as the imminent POPI Act, as well as PCI-DSS requirements (if applicable to the organisation). Other considerations include geographical spread of the devices, given that this would not only increase risk levels, but would also require absolute clarity in respect of legislation applicable to those areas.
Password Protection, Remote Wipe & Lock & Disclosure
One of the primary concerns surrounding the security of mobile devices is the loss of such devices. Particularly in respect of the content on the mobile device being accessed, or the possibility of corporate data being accessed through channels such as VPN connections. Clearly security considerations must include password protection, encryption, as well as remote wipe procedures. Many organisations enforce ActiveSync policies, pre-installed in most consumer mobile devices, to enforce password protection and remote wipe and lock. As a further measure, employees should be encouraged to keep sensitive devices in their possession, and sight, at all times. Ensuring that regular backups are made will not only salvage lost information, but will also assist with minimising downtime by easing the transfer of the information onto a new device. Last and perhaps even more importantly, having a backup of the data will make identifying what information has been lost (and thus determining whether a disclosure needs to be made in terms of regulations) that much simpler.
Verizon’s 2014 Data Breach Investigation Report considered 63,437 security incidents, of which 1,367 were confirmed data breaches. Of this, incidents where an information asset went missing, whether it be through misplacement or malice, accounted for 9,704 total incidents, and 116 confirmed data disclosures. Out of the 9,704 incidents, the theft / loss of laptops accounted for 308 incidents, desktops for 108, flash drives for 102 and a staggering 8,929 “other devices” (where the type of device has not been stipulated). Interestingly, loss of devices is 15 fold more prevalent than theft of a device. The statistics show that, in terms of location, 43% occurred at the victim’s work area, 23% from a personal vehicle and 10% from a personal residence.
Another concern posed by the use of mobile devices in the corporate network, is the risks posed by the integration of applications into our daily lives.
Vulnerabilities within the application could potentially expose the corporate network. Malware presents a major concern, particularly given the risk of it being injected into the corporate network at large.
Effective Policing Improbable
It is vital that organisations proactively engage with employees to manage their expectations relating to the support of personal mobile devices, particularly as this may impact upon information technology support resources required. It should also be borne in mind that help desk staff may require additional training to ensure that they are able to render the necessary support. Hinging hereon is the fact that organisations have less control over these devices. This makes identifying vulnerabilities which may exist, by utilising anti-virus software, ensuring patches are regularly installed, and implementing fire walls near impossible. Even if employees do agree to BYOD policies, it is questionable as to how effectively the organisation will be able to monitor the devices for compliance.
The complexities of cybercrime risk management are more intricate that imaginable; regardless of the complications – it takes just moments from connection to infection. While staff may be protecting their personal computers, the general lack of awareness to safeguard BYOD tablets and smartphones poses a major risk to organisational cyber security. For all these reasons, businesses would be remiss to leave protection to chance, particularly in a country that is home to some of the best hackers in the world.
* Catherine Berry, Camargue Director, Commercial and Cyber Crime Division
* Follow Gadget on Twitter on @GadgetZA
Smash hits the Nintendo Switch
Super Smash Bros. delivers what the fans wanted in the latest “Ultimate” instalment, writes BRYAN TURNER.
Super Smash Bros. Ultimate, the latest addition to the popular Nintendo Smash series, has landed on the Nintendo Switch with a bang, selling 5-million copies in the first week of its release. The game has been long-anticipated since the console’s release, as many fans consider
It features 74 playable fighters, 108 stages, almost 1300 Spirit characters to collect while playing, and a single-player Adventure mode that took about three days (or 28 hours) of gameplay to complete. The game offers far more gameplay than its predecessors, making it the Smash game that gives its players the best bang for their buck.
For those new to the game, the goal is to fight opponents and build up their damage score (draining their health) to knock them off the stage eventually. This makes the game seem chaotic, as many players jump around the platforms as if they were on quicksand, in order to avoid being hit by the other players.
It also services two kinds of players: the competitive and the casual.
Competitive players can be matched on the online service by skill ranking to enjoy playing with similarly high-skilled opponents. This is especially important in e-sports training for the game, and for players wanting to master combos against other human players. The casual gamer is also catered for, with eight-player chaos and button-mashing to see who comes out luckiest. This segment is also important for those wanting to learn how to play.
Training mode is also a place to go for those learning to play. It offers “CPU” players that are graded by intensity to train as a single player to learn a character’s moves, combos and general fighting style. More challenging CPU players can also be used by competitive players to train when there isn’t a Wi-Fi connection available.
Direct Play features in this game, allowing two players with two Switch consoles to play against each other over a direct connection – no Wi-Fi needed. This is especially useful to those who want to have a social gaming element on the go, similar to that of the cable connector of the Gameboy.
Click here to read Bryan Turner review of Super Smash Bros. Ultimate.
Win Funko Fortnite in Vinyl
Gadget and Gammatek have nine Funko Fortnite figurines to give away.
A Funko Pop figurine based on a character set is indicative of reaching the heights of pop culture. It is no surprise, then, that the world’s biggest online game, Fortnite, has its own line of Funko Pop figurines. The Funkos are modeled on the characters in game, including Drift, Ragnarok, Dark Vanguard, Volar, Tracera Ops, and Sparkle Specialist.
Now, local Funko distributor Gammatek has released the Fortnite figurines in South Africa. To celebrate, Gadget and Gammatek are giving away a set of three Funko Fortnite figurines to each of three readers (9 figurines in total). To enter,
You can put the tweet in your own words, but entries must have the competition’s hashtag (#FunkoFortnite) and mention @GadgetZA to be considered valid.
Click here to select the Funko Fortnite character you want to tweet.