DETECT: to Identify Device Usage, Enforce Policies and Audit for Compliance
Every time a device attempts to connect to your organization’s network, it must be checked to ensure that security software is installed and that the security policies are up-to-date and being enforced.
One of the most obvious “Points of Vulnerability” for data breaches is the unauthorized use of personal devices. Very few companies actually have a way of measuring device usage accurately. The most common, yet misleading, measurement is to look at the company’s asset register or review inventory information received from machines on the network which have a standard company image loaded.
The problem with this measurement is that many ‘at risk’ devices simply do not show up in either activity. For instance, an employee who buys a smart phone or iPod® for their own personal use can synchronize information from their local laptop or direct with the company’s email server.
It is true that methods to detect and control mobile devices can be put in place to either prevent or allow device connectivity; however, it is very questionable whether a password alone is sufficient to control device usage and to meet the “reasonable risk” standard mandated in recent state and federal legislation around personal information security.
|
|
Detect: define the
company “rules” for use
of mobile data,
continuously identify and
monitor mobile device
and data usage, and audit
for compliance—all
without impacting
productivity.
|
| |
| |
 |
|
|
