{"id":782,"date":"2015-01-16T22:06:36","date_gmt":"2015-01-17T03:06:36","guid":{"rendered":"http:\/\/www.briandeyo.us\/brd\/wp\/?p=782"},"modified":"2015-01-16T22:14:19","modified_gmt":"2015-01-17T03:14:19","slug":"byod-makes-your-organization-less-secure-because-it-is-impractical","status":"publish","type":"post","link":"https:\/\/www.briandeyo.us\/index.php\/2015\/01\/16\/byod-makes-your-organization-less-secure-because-it-is-impractical\/","title":{"rendered":"BYOD makes your organization less secure because it is impractical"},"content":{"rendered":"<p>&nbsp;<\/p>\n<figure id=\"attachment_790\" aria-describedby=\"caption-attachment-790\" style=\"width: 536px\" class=\"wp-caption aligncenter\"><a href=\"http:\/\/www.briandeyo.us\/brd\/wp\/wp-content\/uploads\/2015\/01\/impractical.jpg\"><img loading=\"lazy\" decoding=\"async\" class=\"size-full wp-image-790\" src=\"http:\/\/www.briandeyo.us\/brd\/wp\/wp-content\/uploads\/2015\/01\/impractical.jpg\" alt=\"Google's definition for impractical\" width=\"536\" height=\"394\" srcset=\"https:\/\/www.briandeyo.us\/wp-content\/uploads\/2015\/01\/impractical.jpg 536w, https:\/\/www.briandeyo.us\/wp-content\/uploads\/2015\/01\/impractical-300x221.jpg 300w\" sizes=\"auto, (max-width: 536px) 100vw, 536px\" \/><\/a><figcaption id=\"caption-attachment-790\" class=\"wp-caption-text\">definition from www.Google.com<\/figcaption><\/figure>\n<p>BYOD which stands for <strong>Bring Your Own Device<\/strong> is a common topic lately amongst the IT Crowd.\u00a0 It&#8217;s one particular method for dealing with the escalating interest of employees wanting to do more work from tablets or smartphones.\u00a0 The strategy is as straight forward as it gets, let the employees bring whatever device they choose to work on, and the IT department will decide what and how the employee can or can&#8217;t do that work.\u00a0 While great on paper, the practical reality of a BYOD strategy is what makes it so ineffective.<\/p>\n<p>If you&#8217;re still reading this, I&#8217;m going to assume you have an interest in IT, and particular the future of mobile technology in the workplace.\u00a0 It&#8217;s likely you have\u00a0 read articles, watched Gartner webcasts, and possibly even participated to some extent in a BYOD scenario.\u00a0 It&#8217;s also very possible you are reading the above and thought to yourself &#8220;Whoa! What the heck are you talking about, BYOD is a bad idea?&#8221;<\/p>\n<p>BYOD on paper is a great idea, but it&#8217;s impractical to think it will simultaneously meet all of an IT departments security needs and the productivity desires of employees.\u00a0 The technology used for BYOD, known as a &#8220;secure container&#8221; is a special app or space on a device where all the company apps are stored in.\u00a0 The container is easily thought of as a locked box inside your device, where the IT department squirrels away the company data.\u00a0 Unfortunately the container really isn&#8217;t where most of your employees are going to do their work.<\/p>\n<p>The concept of BYOD is impractical because it derives from the belief that staff members will only do their work in the way that an IT department believes staff should do their work.\u00a0 BYOD revolves around how an organization can predict or worse dictate how their staff will utilize a mobile device to accomplish their work.\u00a0 A BYOD strategy is incapable of acknowledging all the faster, easier, and sexier ways employees can and will get this work done outside the container.\u00a0 Because of this impractical expectation, BYOD programs are less secure than the IT staff behind them intend.<\/p>\n<p>BYOD exists as a reaction from the world of IT Security and other IT groups over their ever burgeoning workload. They have allowed themselves to be distracted by the belief that work functions will be safe and secure if it is only accessed through this container. This is impractical and counter-productive on a device that is designed to allow people freedom to work however they want.<\/p>\n<figure style=\"width: 500px\" class=\"wp-caption aligncenter\"><a href=\"http:\/\/i9.photobucket.com\/albums\/a86\/Pritchard71\/Pooties\/469761052_6f055c51e9.jpg\"><img loading=\"lazy\" decoding=\"async\" class=\"\" src=\"http:\/\/i9.photobucket.com\/albums\/a86\/Pritchard71\/Pooties\/469761052_6f055c51e9.jpg\" alt=\"LOLCAT being distracted by something shiny - http:\/\/s9.photobucket.com\/user\/Pritchard71\/profile\/\" width=\"500\" height=\"329\" \/><\/a><figcaption class=\"wp-caption-text\">Distracted by Shiny Device &#8211; image from Pritchard71<\/figcaption><\/figure>\n<p>It&#8217;s impractical to believe this container is going to provide all the technology necessary for employees to fully realize the capabilities mobility can bring them.\u00a0 The container doesn&#8217;t matter when your business counts on enabling the versatility of your employees. When an employee is at an important event, they don&#8217;t have time to enter the container every time they need to take a note or a picture.\u00a0 They will use whatever app they are used to, and they will &#8220;copy that to the container later.&#8221;\u00a0 The container has not prevented data leakage.<\/p>\n<p>When was the last time you emailed something to your work address from your personal address?\u00a0 It&#8217;s a very easy thing to do.\u00a0 It doesn&#8217;t matter if staff sign an agreement, once the data is outside the container, it is outside the control of IT.\u00a0 The harder it is for someone to use their mobile device to perform work functions, the more encouraged they may be to find a way around your controls. Is it easier to work on your full-featured document editing app that came with the tablet, or the restricted editor in the container?\u00a0 People send documents through Dropbox or their Google Drive all the time because it is easier and often faster than using the mechanisms provided by their company.\u00a0 It really doesn&#8217;t matter how great your written policy is, people will work how they want to work.\u00a0 <a title=\"Wikipedia page to Shadow IT\" href=\"http:\/\/en.wikipedia.org\/wiki\/Shadow_IT\" target=\"_blank\">Shadow IT<\/a> is a term today because IT departments are spending too much time restricting the tools people want to use to be more productive.<\/p>\n<p>Because BYOD is impractical and drives your staff further away from playing by the rules, the alternative of company-provided equipment is the only way to securely enable mobility for your people. If you are asking your staff to work on a device, give them a secure device that does its best to stay out of the way of the person using it.\u00a0 To provide a secure device that provides as much capability as possible is a difficult recipe to get correct, and any IT department is going to approach these devices in a new, but similar fashion to traditional endpoints like desktops and laptops.<\/p>\n<p>The alternative to BYOD, that of corporate-owned devices is a follow-on topic to this. Look for that shortly!<\/p>\n<p>&nbsp;<\/p>\n","protected":false},"excerpt":{"rendered":"<p>&nbsp; BYOD which stands for Bring Your Own Device is a common topic lately amongst the IT Crowd.\u00a0 It&#8217;s one particular method for dealing with the escalating interest of employees wanting to do more work from tablets or smartphones.\u00a0 The strategy is as straight forward as it gets, let the employees bring whatever device they &hellip;<\/p>\n","protected":false},"author":12,"featured_media":790,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[19,10],"tags":[216,218,220,217,215,90,219],"class_list":["post-782","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-mobile-devices","category-tech","tag-android","tag-byod","tag-impractical","tag-iphone","tag-mobile-devices","tag-security","tag-shadow-it"],"_links":{"self":[{"href":"https:\/\/www.briandeyo.us\/index.php\/wp-json\/wp\/v2\/posts\/782","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.briandeyo.us\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.briandeyo.us\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.briandeyo.us\/index.php\/wp-json\/wp\/v2\/users\/12"}],"replies":[{"embeddable":true,"href":"https:\/\/www.briandeyo.us\/index.php\/wp-json\/wp\/v2\/comments?post=782"}],"version-history":[{"count":7,"href":"https:\/\/www.briandeyo.us\/index.php\/wp-json\/wp\/v2\/posts\/782\/revisions"}],"predecessor-version":[{"id":793,"href":"https:\/\/www.briandeyo.us\/index.php\/wp-json\/wp\/v2\/posts\/782\/revisions\/793"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.briandeyo.us\/index.php\/wp-json\/wp\/v2\/media\/790"}],"wp:attachment":[{"href":"https:\/\/www.briandeyo.us\/index.php\/wp-json\/wp\/v2\/media?parent=782"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.briandeyo.us\/index.php\/wp-json\/wp\/v2\/categories?post=782"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.briandeyo.us\/index.php\/wp-json\/wp\/v2\/tags?post=782"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}