BYOD policies allow employees to use personal devices for work but this brings security risks as sensitive corporate data could be exposed. Many companies permit BYOD but over half of stolen laptops result in data breaches and 71% of companies say mobile devices have contributed to increased security incidents. While BYOD can improve productivity, the document outlines security challenges companies face around password enforcement, remote wiping of lost devices, use of mobile device management software, and having a mobile security policy.

1. BYOD – the security risks
employees are bringing their favourite devices into work. It may be good for
morale, but could your sensitive corporate data be at risk?

2. driven by employee choice, bring-your-own-device (BYOD) policies are
changing the work environment
425 million smartphones companies permitting
were bought in 2011 BYOD
smartphone PC
sales 60%
companies
(millions) permitting
BYOD

3. safe and secure?
1.3 million phones stolen each year over half of stolen laptops
already result in a data breach
29% 71%
no yes
500 samples of Android malware have mobile devices contributed
today, „thousands‟ more this year.
to increased security incidents?
Google releases Bouncer to auto-
scan for malware in App Market.

4. security matters. you need to be aware of the risks.
laying down the house rules half of companies allow any
while keeping the kids happy employee device to access
corporate systems – frightening!
25%
password enforcement allow no
remote kill/wipe of devices
devices 51%
allow any
administrative “back-door” access 24% device
allow only
compliance with devices or original compliant
software/hardware requirements devices
granular management of consumer given the risk of data breach, many firms
vs. business information and lack a mobile device security policy
applications do you have a mobile security policy?
27%
3%
no don‟t know
$3,010 - $179,270
potential cost of unauthorised 17%
access to data held on lost or
yes 53%
stolen devices
but it‟s not yes
enforced

5. pros and cons: is BYOD worth the hassle?
an iPass survey of 1,100 mobile workers Cisco‟s company-wide any device policy
worldwide showed workers who use mobile has delivered productivity gains equal to
devices for both work and personal matters put 30 minutes per employee per day
in 240 more hours than those who do not
30+
minutes
$2-$10/device/month
many enterprises use Mobile Device
Management (MDM) software to set MDM prices vary widely,
and enforce a single security policy but expect to pay this much,
across different types of devices. says Philippe Winthrop
Enterprise Mobility Forum
do you use MDM software to MD in May 2011
enforce security across devices?
6% 35%
don‟t know yes
25% 25%
not yet,
no but we‟re
and we have evaluating /
no plans to piloting

6. Morgan Stanley, Forrester, Aberdeen
Group, IDC, Continental
Research, Websense, Dimension Data, Yankee
Group, Information Week Analytics, iPass, Cisco.