Do you think the companies are fully prepared for the security challenges? After studying one of the latest research* regarding security practices in organizations, I’m afraid they are not. Although up to 64% respondents are aware of the number of mobile security threats that have been raised and will raise in the future, most of them are using single random mechanisms to make their organisations safe and secure.

That’s why I decided to concentrate on five most frequent mistakes in the field of mobile device management to get some advice on how to protect our data at the same time. 

#1 No strategy

89% of companies use random security practices 

To protect your data and devices completely you should remember that it’s not only about using single, random practices. It’s about having one consistent strategy and that is why security policy is so important in this case. Every company using mobile fleet should have and restrict security policy that includes, among others, a list of security rules and procedures, behaviours scenario (eg. in case of data leakage), description of the right / wrong way to use the resources and other security restrictions regarding mobile devices usage (PIN code, passwords, Wi-Fi policy). 

#2 No tools 

Only 38% of companies use two-factor authentication for mobile devices

Have you ever heard about “CEO-frauds”? In March 2018 the European-based cinema chain Pathé lost a small fortune (US$21.5 million!) to a business email compromise (BEC) scam. As a result, the attack cost the company 10% of its total earnings. It was all about the several emails apparently sent from the personal account of Pathe CEO to the managing director, asking her to wire up €19.2 million in four tranches to the bank account of Towering Stars General Trading LLC in Dubai. The whole story has ended as one of the biggest cyber crimes in recent years… that could have been avoided if the company had used security practices such as two-factor authentication.

#3 Lack of employee education

79% said that they considered their own employees a significant threat

Well, that’s no surprise if only 39% of employees change their default passwords. To avoid those situations, the companies can of course force change of passwords on the employees. They can even force other restrictions to be sure that the company data is well secured. But way better is when they educate employees about potential threats and what can happen with the company data. 

#4 Ignorance

85% said their businesses face at least a moderate risk from mobile security threats

…and 26% said it is a significant risk! The number of cyber attacks is still growing. What’s more, the cyber criminals are more motivated, still inventing new tools, looking for new technologies and processes. If they are determined – we should be determined much more. And looking for new solutions to avoid their attacks. 

# 5 Ineffective management

Only 31% of companies are using mobile device or enterprise mobility management

So the problem goes even deeper: we realized we are in potential danger but we don’t care about it. The good thing is that according to the report, we make plans and many companies said they will start investing in Mobile Device Management solutions.

Now it’s time for you to verify how it looks in your organisation. Maybe you will find more mistakes. The question is what you can do to change it…

*Mobile Security Index by Verizon