Greenwave Systems: “The Internet of Things is no... » London, UK: Learning from the past, taking security seriously and protecting the consumer must be at... First of the UK’s new nuclear deterrent subma... » Defence Secretary Michael Fallon  yesterday announced that, to mark Trafalgar Day, Her Majesty the Q... Pulse Secure launches promotion to simplify movi... » SAN JOSE, CALIF.: Pulse Secure has announced “Secure Access NOW” - a major new upgrade program to he... Unisys Appointment Manager moves to Microsoft Az... » LONDON: Unisys Corporation has announced that its Appointment Manager (AM) solution for financial se... WP engine brings improved SEO and Security to 50... » LONDON, UK: WP Engine has announced that it has made Let’s Encrypt™ SSL/TLS certificates freely avai... Courts crack down on unsafe doors and gates » The company responsible for a metal door that badly injured actor Harrison Ford on a Pinewood Studio... Neustar expands its footprint outside the USA... » LONDON and STERLING, Va.: Neustar, Inc. has expanded its EMEA headquarters to a new office location ... Solgari launches enhanced user application suite » London:  Solgari has launched a number of key additional user application features to its cloud tele... In London cost conscious construction companies ar... » A dramatic switch from human guards to cost-effective smart technologies has been the trend in site ... THE QUEEN AND DUKE OF EDINBURGH RECEIVE LONG SER... » Her Majesty The Queen and His Royal Highness The Duke of Edinburgh both received their Long Service ...


Advertise with Vigilance

Got News?

Got news for Vigilance?

Have you got news/articles for us? We welcome news stories and articles from security experts, intelligence analysts, industry players, security correspondents in the main stream media and our numerous readers across the globe.


Subscribe to Vigilance Weekly

Information Security Header

Acceptance of “Bring Your Own Device” means companies must get to grips with Cloud and Application Security

London: Company policies supporting Bring Your Own Device are being widely embraced as a win-win initiative that improves employees’ experience and reduces IT costs, according to results released today of the (ISC)2® 2013 Global Information Security Workforce Study, conducted on behalf of the (ISC)2 Foundation by the analyst firm Frost & Sullivan. At the same time, information security managers admit that companies must do more to understand the security of the technologies behind the trend, particularly for cloud-based systems and applications.

A preview of select results of the (ISC)2 (“ISC-squared”) study were featured at a press conference hosted by Reed Events in advance of Information Security Europe 2013, April 23 -25. The largest study of its kind examining workforce trends in information security covered BYOD as one of three game-changing technology trends that are having a significant impact on information security practice. The global study’s 12,396 respondents, one in four of which work in the EMEA region, clearly establish that BYOD is a prevalent practice - with 53 percent saying their companies actively allow users, either employees, business partners or both, to connect their devices onto their networks. A similar percentage, 54 percent, identified BYOD as a growth area for training and education within the information security profession.

Security professionals, however, are concerned that companies are not prepared for the risks introduced by this trend. Seventy-eight percent consider BYOD to present a somewhat or very significant risk. This reflects increased levels of concern compared to the 2011 study, when mobile devices were identified as a significant risk by 68 percent of respondents.

Further, nearly three-quarters of respondents (74 percent) highlighted that new security skills are going to be required to manage the security risks associated with BYOD. The biggest concerns were over the state of application security (72 percent) and the cloud (70 percent), also a developing area in business systems. Another 66 percent suggested companies needed to get more of a grip on how compliance requirements are being affected with the prevalence of BYOD.

Companies are more open to allowing user-owned smartphones (87 percent) and tablets (79 percent) onto corporate networks than laptops (72 percent), while they are supporting a multitude of platforms, with iOS leading the pack (84 percent), closely followed by Android (75 percent); RIM Blackberry/QNS (62 percent), and Windows Mobile (51 percent).

“Whether approved or not, user-owned tablets and smartphones are connecting into corporate networks and cloud environments,” states Michael Suby, Stratecast VP of Research at Frost & Sullivan. “Furthermore, the escalating capabilities of these devices, such as dual-core processors and multi-gigabytes of storage, add to the level of risk these devices pose to corporate assets and sensitive information. The positive news is that information security professionals are using a growing array of security technologies to stem this risk.”

The business drivers given for turning to BYOD puts the user at the centre of IT strategy. The desire to improve end-user experience at 60 percent was almost equal to the business requirement of supporting a mobile workforce (64 percent). A significant number of respondents (44 percent) also noted the goal of reducing operating and end-user support costs; while the desire to lower IT inventory costs was noted by a much lower 21 percent.

“From a security perspective, BYOD is gaining attention, but current efforts are focussed on the end –point rather than on protecting business data and assets,” says Wim Remes, CISSP, member of the (ISC)2 Board of Directors.

The top technologies identified to mitigate risks include: encryption, the use of virtual private networks, and remote lock and wipe functionality. Less than half (42 percent) are working with applications access control or authentication (40 percent), basic controls that exist on traditional IT infrastructures.

“This can be an opportunity for IT operations to fully seize the role of a business enabler. If approached correctly, with a focus on the data, BYOD can actually improve security and enable the business to compete at a pace that was but a remote dream half a decade ago,” concludes Remes, who presented the results at the conference.

The (ISC)2 Foundation will release the full report of the 2013 (ISC)2 Global Information Security Workforce Study in February as a resource to industry. Based on findings of an industry survey conducted in the autumn of 2012, the study is unique in its focus on issues affecting the security profession rather than general market developments, products or security breaches. Participants from 145 countries around the world contributed to offer insights into the changing profile of the profession, training and development needs, salary levels, attitudes and developments toward risk management, and the impact of key trends in business systems on security management