Remote work is quickly becoming the norm around the world, and the ability of employees to log on, on any device is driving it. In fact, as of 2021, 78 percent of US companies have Bring Your Own Device (BYOD) policies (source: Frost & Sullivan). Chances are good that your company already uses BYOD as a key part of your business. But have you thought about the vulnerabilities BYOD brings to your network? At Integris, we work with companies to help them reap the benefits of BYOD, while minimizing the risks. Let’s talk about how.
First, Understand BYOD Security Risks
With BYOD, security risk is baked in to the system. The reason is obvious. Non-work issued devices are loaded with software, apps, and links that have not been vetted by your company’s cybersecurity team.
When you allow employees to access your network through their own smartphones, tablets and home computers, you run the risk of:
- Data Loss—when an employee’s device gets lost, stolen or damaged. Information they’ve stored locally on their device can be lost forever.
- Third Party Software Attacks—when cyber thieves download malware onto software at the platform level, effecting all users. It’s impossible to monitor every app or program an employee has loaded on a personal device.
- Malware and Jailbreaking—when employees click bad links that download malware, or when thieves use the third party software to bypass your network security systems
- Unsecured wifi—when hackers use man-in-the-middle attacks, and break into your system through an unsecured wifi. When an employee logs in while a hacker has control of the wifi, their afternoon spent working at the local coffeeshop can turn dangerous, and put their data and yours at risk.
With all that in mind, our first BYOD security tip is simply understanding that a liberal device policy does come hardwired for risk. Fortunately, they are risks that can be mitigated. And the bottom line benefits of BYOD are too good for most organizations to ignore.
Risk vs. Reward: Can BYOD Save Your Company Money?
In a word, yes. And that’s why companies are willing to invest in BYOD security. Remote work is improving productivity, increasing employee satisfaction, and saving companies money, every day. Employees working remotely at least 60 to 80 percent of their time get more done over the course of the day.(source: Gallup) All that extra work can add up. A recent study by Flipjet estimates that mobile workers put in an extra 240 hours of work every year, a benefit that net companies an average of $5,114 a year, per employee.
Cisco calculates the savings a bit more conservatively. They compared organizations with “company issued” cell phones versus BYOD companies offering their employees cell phone service stipends. Turns out, the BYOD companies saved between $300 and $1300 a year per employee.
This is the good news, and the real untold story when it comes to BYOD. Making it easy for your employees to work from anywhere should be a key part of your business strategy. Let’s dig in to our favorite BYOD security strategies.
Take These Steps Now to Enhance Your BYOD Security
The modern workplace journey is taking many companies into the cloud, and this is a boon for remote work security. You now have more tools than ever to keep BYOD devices safe. Here’s how they work.
1. Move Your Network to the Cloud
Companies like Microsoft have been migrating its operations to the cloud now for quite some time. Now, companies can stream Microsoft Office applications and many others live over the internet with Windows 365. Now, Microsoft has announced it will be taking its entire operating system into the cloud with Microsoft Windows 365 Cloud PC. Here at Integris we were one of the first MSPs to work with this program and we’re here to tell you, it’s great. It eliminates the majority of security issues with BYOD, because the security is in the cloud. When employees log in with cloud PC, they get their full desk top experience right down to the screensaver, on any device.
2. Password Protection
The first step in protecting your network is to require passwords on all devices and applications. Remember the basics of password protection:
- Passwords between 8-12 characters, including a combination of letters, numbers, and special characters
- Never recycle old passwords
- Use a different password for each device and application
- Use a password manager like 1Password
- Only share passwords via a password manager, which will allow access to files through an autogenerated password instead without revealing the original password.
3. Restrict Permissions and Data Access
Make sure each employee only has authorization to access the data, applications and files that are needed to perform his or her job. Restrict access to sensitive data to only authorized users. Doing this reduces the damage caused by a bad actor’s infiltration of a personal device.
4. Routine Back-Ups
Make sure you have a system in place to reliably back-up all data on each device. This makes restoring files and information far easier if a device is damaged, lost, or stolen.
5. Protect Each Device with Antivirus Software
Each device that accesses your network needs to be protected with a rigorous anti-virus platform. Remember the best way to remediate a breach is to make sure it never happens in the first place.
6. Blacklist Prohibited Applications
Blacklisting means blocking certain applications that are known to be malicious. Some social networking and file sharing sites may fall under this category.
7. Cybersecurity Education
Your employees are the gatekeepers of your network security. Make sure you give them the tools they need to protect your network. Cybersecurity training is an effective way to educate your teams about the importance of BYOD security.
Adopting A BYOD Policy
Now that we’ve talked about our favorite tips, it’s important to take all those tips and turn them into actionable policy. Your MSP or IT department should be able to help you finalize your policies. Here is a free template we like to use, download here.
Have your employees read the policy, sign a copy for his or her file, and keep a copy. The BYOD policy will help protect you if a breach should happen, and that breach is traced to an employee who is not following the policy.
How Integris Can Help with BYOD Security
If you’ve read all this, and you’re ready to get to work on your own BYOD policy, Integris can help. We can help you create and implement the BYOD policies, from antivirus to password protection and multi-factor authentication, that will keep your employees’ devices and your network secure.
Find out how Integris can help you take advantage of the BYOD landscape, safely. Contact us today.
Does your company have a BYOD policy?
All companies should consider having a BYOD policy in place. Don’t have one? Click the link below to download your Sample BYOD Policy.
 |
[sc name=”blog-cta-cybersecurity”]
