Why the ship has sailed on BYOD

QPC Security - Breakfast Bytes

Content provided by qpcsecurity. All podcast content including episodes, graphics, and podcast descriptions are uploaded and provided directly by qpcsecurity or their podcast platform partner. If you believe someone is using your copyrighted work without your permission, you can follow the process outlined here https://staging.podcastplayer.com/legal.

1+ y ago 29:38

M4A•Episode home

Tom Dean of Consulting Adventures joins Felicia for part three of the analysis on mobile devices and the problems with them.

OKTA breach, IT admin’s password getting stored in gmail password synced manager
Two-way problems. Personal on business and business on personal
Lack of clarity around device wipe, device use policies, apps running on devices
Compliance is easier when business owns the asset and delineation of ownership of asset and data is clear.
If the configurations are not managed, the cost profile to the company is a lot higher.
Credentials and MFA spill over in both directions
Data compliance issues
DLP and encryption issues
Lack of ability to define device security settings like PINs
How are you doing effective device configuration backups?
How do you prevent malicious apps from being installed on the devices?
How do you have leveraged support capabilities from the mobile devices?
Asset inventory is mandatory
Compliance costs can be drastically reduced by having company owned assets that only get approved applications. This is another reason why end users CANNOT have admin access.
No VPN access until someone has been part of the company for 30 days.
Onboarding and offboarding is crucial to information security

Information security is not a technical controls issue, it is a HR management issue.

Verizon fell for fake “search warrant,” gave victim’s phone data to stalker

https://arstechnica.com/tech-policy/2023/12/verizon-fell-for-fake-search-warrant-gave-victims-phone-data-to-stalker/

As if all that wasn't bad enough, if an employee of a company has issues in their personal life, it will spill over to business and especially in the context of allowed personal use of company assets.

96 episodes

#Tech #qpcsecurity #MBA #Business News #Business #News