Almost a quarter of employees are unaware of their organisation’s bring your own device (BYOD) policy, according to identity management firm Intercede.
A survey of UK employees found that 23% of those asked knew nothing about their firm’s policies. A quarter of employees admitted accessing corporate information on their personal devices, with 7% doing so without permission.
Richard Parris, CEO at Intercede, explained that by bypassing BYOD practices, employees were unknowingly opening a door for cyber criminals. He said organisations should do more to ensure employees are aware of these risks.
“A lot of employees can get access, or believe they can get access, to corporate data and in many cases are oblivious to whether there is any corporate policy in place to control that usage,” Parris said.
“I think that’s quite concerning because even before you get on to technology it suggests that employees aren’t sensitive to the value of the corporate data they may be accessing.”
He explained that companies need to use methods such as education and awareness strategies and technological limits to data access to protect company data.
Of those asked, 40% were able to access corporate data on their personal devices without permission from their organisation. Of those who knew they had to request permission to access data, 23% still accessed data without asking.
Few employees said they would be concerned about their organisation’s data if they lost their device, and 19% admitted to leaving themselves signed in on devices at all times, with 21% claiming the login process was “too long and complicated to remember”.
Parris said mobility is about productivity and enablement, so if users are finding it too complicated to use, they’re not getting the benefit of productivity.
More on mobility
“A lot of companies and organisations can benefit hugely from the mobile enablement of their workforce,” he said.
“They can put mobile devices out there to enable business productivity, but the security gets in the way of it being used – such that employees don’t bother accessing data on the move, then you’re not getting the business benefit.”
Earlier this year, a study found more than a third of micro businesses are using mobile devices, compared to 35% for large enterprises, but have less awareness of security, highlighting the need for education about BYOD policies.
Speaking at Enterprise Mobility World, Matt Groshong, head of technology at the BBC, explained that using two phones is not efficient, and COPE would be a better strategy for enterprises adopting mobility in the future.