
The use of mobile devices increases the risk of loss of company data. This risk can be mitigated by using company liable mobile devices and following two practices. First, the company should maintain an accurate and updated inventory of all company-owned mobile devices along with each device’s user assignment. This is usually done as part of a telecom expense management process. Second, the company should acquire the capability to remotely “wipe” or disable and delete all data from lost or stolen mobile devices.
Loss of Company-Owned Mobile Devices: Personnel Data Security
The use of mobile devices also increases the risk of loss of private data belonging to employees. An example of this type of loss could involve a human resources manager who loses a mobile device that contains company personnel data, such as employee tax identification numbers or medical information. If this type of loss occurs, we recommend employers notify employees immediately. Here again, the employer can mitigate risk by implementing wireless expense management and maintaining an accurate inventory of mobile devices and corresponding user assignments, along with the capability to remotely “wipe” mobile devices.
Mobile Devices and Enterprise Network Security and Performance
In addition to the risks discussed above, the use of mobile devices introduces vulnerabilities and potential performance issues into an enterprise’s network. Network security risks increase exponentially as an organization adopts mobile devices with e-mail and internet browsing capabilities, as a portfolio of such devices provides numerous attractive access points into a company’s network for viruses and hackers. Telecom and IT managers must ensure that appropriate security measures are deployed to drive down risks as far as possible. Highly effective tools to manage risk include data encryption, firewalls, virus protection and the use of passwords.
It is very easy for employees to download applications onto company-owned smart phones, PDAs or mobile data devices. Some of these applications may create security risks or create network bandwidth bottlenecks. Employees should agree not to download software that is not approved by the company onto company-owned devices. Your service provider may provide utilities that prevent users from downloading unauthorized software or content.
Again, the employer can mitigate these risks by implementing wireless expense management maintaining an accurate inventory of mobile devices and corresponding user assignments, along with the capability to remotely “wipe” mobile devices. It is not good practice for the company to rely on wireless service providers to maintain this device and user assignment inventory, as it must be accurate and available at a moment’s notice.
My next post on the topic of wireless expense management will discuss the implications of employee use of company-liable wireless services.