Lindsey Donato | August 18, 2014
As technology advances and new mobile devices emerge daily, businesses need to continuously evolve their security strategies in order to protect their organizations. There is a rise in employee demand for workplace flexibility, the ability to work remotely and while on the go. More and more millennials are taking over the workforce and insisting management allow them the use of their own mobile devices for work. CEOs are also pushing for more flexibility in their IT environment. Salespeople want to make engaging presentations without bringing along paper documents. The Bring-Your-Own Device, (better known as “BYOD”), movement is inescapable. The trend is innovative, and it may increase productivity, but it is also places increased pressure on IT departments to manage and secure data and devices. CIOs and IT departments must craft a policy that delicately balances the privacy rights of its employees with the company’s right to access, monitor, disclose and protect company data. So how do they do it?
BYOD Security Policy
IT security policies vary by industry. The type of data that a company obtains, processes and publishes will determine which regulatory requirements and compliances must be followed. Organizations need to be particularly careful if Payment Card Industry (PCI) data or Health Insurance Portability and Accountability Act (HIPAA) content is part of their day-to-day operations. Organizations should thoroughly review all pertinent compliance areas for their business to ensure critical security issues are addressed. The following eight steps can help businesses get a handle on how to safely approach BYOD:
- Review Current Security Policies and Set New Policies as Needed
- Educate the Staff and Set Clear Expectations
- Plan Ahead and Make Some Determinations About Acceptable Devices
- Classify User Groups and Data Types
- Require a Personal Identification Number (PIN)
- Implement Mobile Device Management (MDM) Software
- Plan For Missing/Stolen Devices
- Review Policy Compliance Regularly
Every business is different and security needs will vary. But regardless of industry, BYOD will make its way into the business technology landscape. By planning appropriately, implementing security measures and MDM, maintaining inventory of devices and knowing what to do when one goes missing, companies can embrace this trend. Employees can work remotely, efficiently, freed from their desks, while employers, technology departments and CIOs can still sleep at night.
