Mobile security is enterprise Achilles heel

gallery

A new survey by the National Computing Centre (NCC) has singled out mobile security as an area where its users are falling down.

Although this year's NCC Benchmark of IT Strategy surveyed trends across a number of areas, including business intelligence, data governance and strategic applications and technologies, security topped its agenda.

The survey found that, while most organisations are now addressing external IT security threats through measures such as virus detection, spam blocking and firewalls, the security of Wi-Fi networks, voice over internet protocol technologies (VoIP) and liabilities posed by small USB storage devices still have to be addressed by many.

Of the 190 organisations questioned, 40 per cent of respondents have only partially secured their wireless networks, or not secured them at all, while only 15 per cent have implemented VoIP security.

The NNC welcomed the adoption of internet security but said the dangers of unsecured Wi-Fi can be overlooked. Stefan Foster, NCC managing director said: "Running unsecured WiFi is like locking the front door, but leaving the windows open.

"Fraudsters are increasingly targeting IT systems and the growing use of Wi-Fi is attracting their attention both inside and outside of the office environment. Unsecure wireless is putting organisations and those who interact with them at unnecessary risk."

Given a slew of recently reported laptop thefts from commercial and public organisations, the survey suggests that the protection of data in this area is experiencing considerable growth, with 20 per cent of respondents saying that extra security measures were currently implemented. And over 20 per cent said such work was under development or planned.

The NCC also highlighted the security liability impact introduced to organisations through the explosion in use of small, high-capacity USB data devices. Nearly 75 per cent of respondents recognise that this liability will need to be addressed, but a paltry 11 per cent have fully implemented controls on USB/data writing devices on the desktop.

It also drew attention to an apparent lack of investment in sufficient security training. "Much IT related crime comes from within the organisation so it is alarming that 25 per cent of respondents indicated that formal security training for end-users was "not relevant" or "not considered" and only 40 per cent indicated end users security training was fully or partially implemented," said Foster.

However, it found growing interest in the area of authentication procedures, where 40 per cent said they had implemented single sign-on access systems for end users and 30 per cent said they had such deployments in plan or under development.

And what sectors are driving this security push? The highest proportion of security spending was reported by the education sector, but the highest per-capita IT spending levels were reported by financial organisations.

To assist organisations in implementing Wi-Fi security, the NCC is making freely available a downloadable copy of its Guideline, "Wireless - technology with no strings attached". Visit www.nccmembership.co.uk for a free copy.

Mobile phone news, reviews, themes and downloads at Know Your Mobile

Email to a friend

Print this page