BYOD security challenges leave companies at risk

Organizations aren’t moving quickly enough on cybersecurity threats linked to the drive toward using personal mobile devices in the workplace, warns a QUT privacy researcher.

QUT’s Dr Kenan Degirmenci

BYOD security challenges everywhere

Dr Kenan Degirmenci from QUT’s Science and Engineering Faculty’s School of Information Systems said workers worldwide expected to take their work with them whenever and wherever. But he warned Bring Your Own Device (BYOD) had opened up a can of worms for employers and employees alike.

“The breakneck speed of digital transformation brought with it opportunities as well as threats,” he said.

“Organizations don’t appear to be keeping up with the pace of change, deliberately putting the brakes on digital transformation because it comes with security challenges.”

Rising threats

Dr Degirmenci said, nonetheless, by 2021 the BYOD and enterprise mobility market which incorporates segments such as software, security, data management and network security is estimated to grow to $73 billion globally.

Data breaches including stealing of personal information are also on the rise for all kinds of businesses and workplaces.

Often employees use their personal devices, but many don’t know if their employer has a policy in place to protect their data and usage.

“Some organizations wary of malware or theft of data can track employees’ locations during work and non-work hours, wipe data, as well as access private emails and photos,” Dr Degirmenci said.

The research involved a case study of two multinational companies and a survey of almost 550 employees from the United States, Germany and South Korea about BYOD to work.

Taking on BYOD risks

Dr Degirmenci said the multinational companies from the survey used mobile device management (MDM) to monitor, manage and secure devices of employees.

“American employees placed greater emphasis on BYOD risks compared to Germany and South Korea,” he said.

Australia ranked similarly to the United States in terms of its “individualist-type culture” and while workers wanted increased flexibility there were drawbacks to using their own devices. New technologies and digital capabilities are also omniscient across the education sector with schools enacting BYOD.

“We’ve recommended BYOD security management be improved, particularly for countries like America and Australia.”