{"id":13206,"date":"2012-07-26T13:04:00","date_gmt":"2012-07-26T12:04:00","guid":{"rendered":"https:\/\/aidanfinn.com\/?p=13206"},"modified":"2012-07-26T13:04:00","modified_gmt":"2012-07-26T12:04:00","slug":"once-you-go-byod-what-happens-to-information-security","status":"publish","type":"post","link":"https:\/\/aidanfinn.com\/?p=13206","title":{"rendered":"Once You Go BYOD, What Happens To Information Security?"},"content":{"rendered":"

I just glimpsed at a post on NetworkWorld called Email in security hot seat with rise of cloud, BYOD<\/a>.  In it I saw this piece of text:<\/p>\n

\n

IBM famously issued a new set of BYOD policies<\/a> that, among other things, forbid employees to use a competitor’s cloud service (no more Dropbox, no more Carbonite, iCloud, etc.), to forward corporate email to private accounts, to transmit unencrypted data, or to use Apple’s personal assistant, Siri.<\/p>\n<\/blockquote>\n

I\u2019ve talked about BYOD now and then for quite a while.  I\u2019ve not made up my mind on it yet.  BYOD has a lot of complexities in terms of technical support, security, compliance, and so on.  Once you put the user in control of choosing a device (a \u20ac300 laptop not build for heavy usage versus a proper business machine with support) and managing that device, you lose control.<\/p>\n

But here\u2019s my thought\u2019s on the above IBM rule. You\u2019ve put the user in charge.  Users have no interest in rules.  Put all you want in the acceptable usage rights document.  The first people to contravene those rules will be the executives who wanted them put in place.  With BOYD you have ceded control and accepted the premise that the user knows best how they should work.  If that user thinks that DropBox is the best way to get data off of their iPad and onto their PC then that\u2019s what they\u2019ll use (what other choice have they?).  If they want to back up their work then Carbonite is nice an cheap.  If they want to use an iPhone 4s then they\u2019re not going to not<\/em> use Siri (\u201cThis is your reminder to call the vet\u201d), the most marketed feature of the phone.<\/p>\n

Rules like this are the lawyers\u2019 answer but don\u2019t deal with the realities of human nature.  The reason IT did lock down PCs was to protect the business\u2019s information property.  With BYOD, you hope that they don\u2019t send stuff all over, that they do install the app that allows remove lockdown and secure wipe, and that they act responsibly.  But hey, these are the same people that will handover their corporate passwords for a free pen<\/a> in the street outside their office.<\/p>\n

Technorati Tags: Security<\/a><\/div>\n","protected":false},"excerpt":{"rendered":"

I just glimpsed at a post on NetworkWorld called Email in security hot seat with rise of cloud, BYOD.  In it I saw this piece of text: IBM famously issued a new set of BYOD policies that, among other things, forbid employees to use a competitor’s cloud service (no more Dropbox, no more Carbonite, iCloud, … Continue reading “Once You Go BYOD, What Happens To Information Security?”<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"om_disable_all_campaigns":false,"_monsterinsights_skip_tracking":false,"_uf_show_specific_survey":0,"_uf_disable_surveys":false,"_wpcom_ai_launchpad_first_post":false,"footnotes":""},"categories":[37],"tags":[190],"class_list":["post-13206","post","type-post","status-publish","format-standard","hentry","category-security","tag-security"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t