TITRE Fortinet 2013 Global Survey 11 Fortinet Confidential Methodology • Survey company: Vision Critical (Independent third party – UK based) • Respondents: − Worldwide survey conducted in 20 territories in October 2013 − 3,200+ active employees in full time employment aged 21 to 32 − University graduate level individuals − Owners of personal smartphones, tablets or laptops 2 Fortinet Confidential Agenda 1 BYOD State of Play 2 Bring Your Own Cloud 3 Emerging Technologies 4 Threat Literacy and Impact 3 Status on Corporate BYOD Policy Does your organization have a corporate policy governing the use of personal devices at work? U.S. Worldwide Yes, my organization has a policy which prevents the use of personal devices at work Yes, my organization has a policy that allows the use of personal devices at work 4 Yes-51% Yes-45% No-44% No-50% Don't Know-5% Don't Know-5% Worldwide US EMEA 19% 17% 18% 32% 29% 35% According to survey, over half of organizations have a BYOD policy in place today, with the majority allowing the use of personal devices at work Corporate Policy Contravention If your employer has / had a policy that prohibits the use of personal mobile devices in the work environment or for work purposes, have / would you ever go against this policy? World Americas Yes-51% No-49% Yes-50% No-50% Over half of respondents around the world are ready to contravene company policy banning BYOD 5 Corporate Policy Contravention If your employer has / had a policy that prohibits the use of personal cloud applications such as Google Docs, Dropbox and Skype in the work environment or for work purposes, have / would you ever go against this policy? World 6 Americas Yes-36% Yes-31% No-46% No-47% Don't Know-18% Don't Know 22% Corporate Policy Contravention If your employer has / had a policy that prohibits the use of Emerging Connected Technologies such as Internet enabled cars, gaming consoles and wearable gear such as Google Glass or smart watches in the work environment or for work purposes, have / would you ever go against this policy? U.S. World 7 Yes Certainly16% Yes Certainly17% Yes Maybe-33% Yes Maybe-29% Probably Not31% Probably Not31% Definitely Not12% Definitely Not17% Don't Know-8% Don't Know-7% Agenda 1 BYOD State of Play 2 Bring Your Own Cloud 3 Emerging Technologies 4 Threat Literacy and Impact 8 Use of Personal Cloud Services for Work Purposes Which cloud data services do you have your personal account for and ever used for work purposes? AMER None 23% 7% 8% 10% Other cloud services Webmail eg. Outlook.com, Gmail,… 55% Evernote 7% ‘YouSendIt’ (now rebranded HIGHTAIL) 6% 7% Have ever used a personal account for work purposes 12% 12% 44% 21% 28% Google Drive 10% iCloud 9 Have a personal account 28% DropBox MS SkyDrive 0% 74% 20% 45% 31% 40% 60% 80% Level of Trust in Cloud Services How much do you trust the cloud with storing your personal data? 70% 57% 60% 50% 40% 60% Worldwide 57% AMER China 41% 32% 30% 30% 20% 6% 10% 6% 2% 6% 5% 1% 0% I fully trust the cloud with I understand there are my data and will store any security risks and only type of data in a cloud store data that I don’t application worry could get lost or which would not present any major issues if compromised I don’t trust the cloud at all and do not use it to store any data I don’t know Almost one third of the cloud storage users sampled fully trust the cloud for storing their personal data, with only 6% citing aversion through lack of trust 10 Fortinet Confidential Business Data Evasion What types of work related data/information do you store in your personal cloud services? 15% 13% I don’t store work data in any personal… USA 3% 2% Other (Specify) Worldwide 36% Document templates and presentations 42% 45% 46% Work-in-progress documents Passwords 12% Financial information, eg. sales data 19% 16% 20% 25% Assets, eg. graphics, logos 29% 48% Work emails 18% Critical private documents such as… 54% 22% 31% 33% Customer data, eg. contact details 0% 10% 20% 30% 40% 50% 60% Only 13% of all respondents who have a personal cloud account(s) do not store 11 business-related information on that (those) account(s) Agenda 1 BYOD State of Play 2 Bring Your Own Cloud 3 Emerging Technologies 4 Threat Literacy and Impact 12 Business Use of Connected Technologies Which of the following devices you own or might own in the future do you think will become useful for your work? 80% Worldwide 70% 70% China 59% 60% 50% AMER 50% 47% 48% 51% 38% 38% 42% 40% 27% 30% 21% 20% 20% 10% 0% Google Glass and other wearable technology, including smart watches Internet enabled TV Internet enabled gaming consoles Internet connected cars Strong trend for wearable technologies to enter the workplace with half of total respondents willing to use them at work 13 Fortinet Confidential Adoption of Wearable Technology at Work 100% When do you think wearable technology7%will be in 1% widespread use in your workspace? 2% 10% 11% 12% 8% 9% 10% 90% 80% Don’t know 3% 29% Never 31% 70% 33% 37% 60% 29% 50% 35% 40% 30% 39% 33% 28% When the price makes it more affordable 33% 20% 32% 10% 16% 15% 15% Worldwide AMER EMEA When an application available on the device becomes critical for work purposes As soon as it becomes available 20% 0% APAC China Broad consensus on the adoption of wearable technology at work with 16% (19% in Italy) expecting immediate adoption 14 Agenda 1 BYOD State of Play 2 Bring Your Own Cloud 3 Emerging Technologies 4 Threat Literacy and Impact 15 Threat Literacy I understand each of the following words and phrases: Hacking 69% 23% 22% Pharming 53% 50% Phishing USA 22% 20% Botnet 59% Trojan Worldwide 67% 47% 48% Worm 62% 61% Spyware 50% 48% Adware 59% 58% Malware 77% 77% Computer Virus 27% 26% Distributed Denial of Service… 19% 20% Advanced Persistent Threat… 54% Cybercrime 0% 16 77% 10% 20% 30% 40% 50% 60% 61% 70% 80% 90% 3 out 4 respondents do not fully comprehend terms like APTs, DDoS, Botnets and Farming Device Vulnerability To your knowledge, which (if any) of your personal devices have been compromised by third party cyber activity, e.g. computer viruses, malware etc? AMER 100% 90% 80% 70% 7% 8% 33% 38% 20% 14% 60% 50% 65% 40% 30% 59% 71% 55% 20% 10% 14% 15% Own tablet Own smartphone 0% Own desktop PC Own laptop Attacked Never attacked Don’t know Globally, 59% of Gen-Y employees’ computers and 53% of their laptops have been compromised. Globally, 19% of users’ tables and smartphones have been compromised. 17 Fortinet Confidential Educating on Threat Landscape Do you feel you have any obligation to understand the security risks posed to your organization by the use of your own devices in work, or for work? Americas Worldwide 7% 5% Yes, I should know the risks of using my own devices 88% No, I don’t have to understand the risks of using my own devices I don’t know 6% 3% 91% Yes, I should know the risks of using my own devices No, I don’t have to understand the risks of using my own devices I don’t know Almost all respondents agree that they have an obligation to understand the security risks posed by using their own devices 18 19