Before we address security on devices like smartphones and tablets, I’d like to thank DataXoom for the opportunity to share my passion with all of its readers. For more information on the Bring Your Own Device (BYOD) movement that we’re about to discuss, check out their awesome article on how to improve the productivity of your employees with mobile technology.
While digital security may not be your main focus when you’re getting a start up off the ground, its importance can’t be overstated. If you’re leaving any aspect of your digital presence unsecured—including mobile devices—you’re making a huge mistake.
A single security breach can destroy your customers’ trust in you, and if customers can’t trust your business, they won’t come back.
Most people do their best to keep their computer secure. They enable Windows Firewalls, install anti-virus software, and take precautions to avoid annoying pop-ups. Even if you have a professional keeping your PCs safe, you might still be committing a fundamental error in security.
You may have the security basics of traditional desktop PCs covered, but are you thinking about mobile devices and how to keep them secure?
It’s becoming fashionable among both businesses and schools to encourage a “Bring Your Own Device” policy, and for good reason. It saves organizations the time and money it takes to maintain lots of PCs if they allow people to access the Wi-Fi from their own devices.
It can increase the convenience and efficiency of your employees if they use their own devices at the office. After all, they won’t have to waste time learning new systems or transferring information if they are using a single device at home and at work.
However, BYOD (as it is known) can create serious security issues.
If you don’t have access to the machines your employees are using, you can’t enforce a company-wide security policy. You may try to implement a regulated security system by demanding that employees take certain actions with the devices they’re using, but this still doesn’t guarantee that you’re in the clear. Not all security tips and services will work across platforms. Some of your employees will be using Macs and others will use Windows, but for some, their Kindle will be central to their productivity, and others will be unable to function without their out-of-date iPhone or iPad. What do you do?
Additionally, human error is always going to be a problem for any security system. Murphy’s Law dictates that sometimes mistakes will just happen. Just like we forget to lock the car doors or turn off the oven, sometimes our employees will forget to update their antivirus software or will mistakenly open a suspicious email. If others are using the device besides your employee, human error can compound. Considering human error doesn’t mean you don’t trust your employees, it just means that not everybody is an IT expert, and their spouses and children probably aren’t either.
First, take care of the basics.
Educate your employees on mobile security best practices. Require employees to install anti-malware and anti-theft protection on their phones and tablets, and encourage them to never jailbreak or root their device.
We often forget that physical security matters as much as digital security does, especially when it comes to mobile devices. Encourage employees to password-protect their device so that if they lose it someone can’t flip through it and find sensitive information. Any password they use for any account should be secure, meaning it includes a variety of lowercase and capital letters and numbers, and doesn’t contain dictionary words.
Remind them that when they’re away from the office they should never be using unprotected public Wi-Fi. This can open them up to a myriad of security threats, both unintentional and malicious, from people connected to the same hotspot.
To patch up security holes, use a VPN.
A Virtual Private Network (VPN) will create a secure tunnel from the source of information to its destination, meaning that data going between a user’s computer and the site they are accessing can’t be intercepted.
VPNs also help prevent viruses, spyware and malware, thereby increasing your security. Not only can malware and viruses harm your equipment, but many of them exist to filter information to their creators, such as credit card numbers and personal data. Obviously, that’s the last thing you want to leak out of your business.
VPNs were originally created so that people who were working remotely could access their business’ servers. Now they’re put to a variety of uses, including allowing your employees to use unprotected public Wi-Fi safely!
If you want all the data that leaves and enters your office via Wifi to be protected with a VPN, there’s a solution that will prevent the natural human error that can wreck even the best laid plans. You can install a VPN directly to your router, meaning that anybody who uses your Wi-Fi will benefit from its protection.
While BYOD might take a load off your plate in some ways, if it’s not handled correctly it can damage the reputation of your business. For your own sake, it’s important to take every precaution to secure your employees’ mobile devices and protect the data that has made your business a success.
About the Author: Cassie Philips is a blogger and internet security expert with a passion for educating others on how to keep themselves and their data safe from prying eyes. For more information, visit her home on the web, SecureThoughts.com.
The post Why Businesses Need to Think About Mobile Security appeared first on DataXoom.