iPod: new threat when it comes to mobile security

Manging mobility requires planning, says Ephraim Schwartz

Ah, isn’t it good to be back from the holidays, showing off the latest gadgets you received as gifts from your family? That new iPod, for example, will be great for storing files, especially because your company won’t allow you to take home your laptop for some silly security reason. No one will ever guess all the stuff you need is around your neck, stored in a little silver Mini.

Multiply that scenario by the number of devices available — cellphones, handhelds and lesser MP3 players — times the number of workers storing and accessing proprietary company information “in the wild”, as Philippe Winthrop, research director for wireless and mobility at the Aberdeen Group, puts it. Reading his report Enterprise Mobile Adoption: A Corporate Conundrum you quickly come to understand the need to rein in mobile devices through a comprehensive mobile management strategy.

It should be noted that the Aberdeen study was sponsored by four companies in the mobile industry: Sprint, Mobile Armor, Integrated Mobile and HTC. A hundred and fifty companies were surveyed.

Security is not the number one reason companies have hesitated in deploying mobile devices. According to the study, 72% of those who have no plans to adopt a mobile strategy cited an unproven business case for mobility as the reason they are holding off. Cost of services was the second gating factor, at 44% and security was third, at 40%.

Among those who are deploying a mobile strategy, however, security is at the top of the list of their concerns. The problem is that you can’t really have a good security policy for mobile unless it is part of your overall strategy, Winthrop says.

“There is a technology component, a legal component and a human-factor component, and all three have their own share of risk,” Winthrop warns. Of course, it’s a lot easier to manage mobile devices and policies if the gateway to adoption is the organisation — and not devices that came directly from beneath the Christmas tree to the office desktop. After all, as Winthrop says, you can’t manage what you can’t see.

I also spoke with Jay Highley, president and CEO of Integrated Mobile, a professional services outfit that offers managed services for mobile devices, about this problem. According to Highley, most organisations don’t even know how many mobile devices they have, what they pay, and the true cost of supporting them. Highley says companies must define a mobile-device policy and create a unified enterprise database across a multi-carrier environment that might even include that iPod. The policy should require employees to register their devices, and the database should include fields such as the rev level of the device and the cost centre to which it belongs.

But I think new times require new ideas. For me, the secret to managing mobility is to create a single point of contact. It’s possible to do this by using a managed service such as Integrated Mobile, or, alternatively, to create a department of mobility that does it all.

Join the newsletter!


Sign up to gain exclusive access to email subscriptions, event invitations, competitions, giveaways, and much more.

Membership is free, and your security and privacy remain protected. View our privacy policy before signing up.

Error: Please check your email address.

Tags management

Show Comments