InformationWeek 2014 Mobile Security Survey Research Findings © 2014 Property of UBM Tech; All Rights Reserved Executive Summary It's not that smartphone and tablet hardware is disposable, exactly. But it's not nearly as important to the 371 business technology professionals responding to our 2014 InformationWeek Mobile Security Survey as the data in device memory. Securing company data residing on mobile devices is rated very important by 68%, 21 points ahead of securing devices themselves using antivirus/anti-malware or MDM client software, and 72% say their top mobile security concern is data loss due to lost or stolen devices. Other data points from our survey: >> 50% allow all corporate-owned devices to access social media sites and use related apps; 31% limit that access to certain departments. Just 19% ban it completely. >> 46% feel only moderately confident that their mobile security controls are effective at protecting data. >> 40% worry about users forwarding corporate data to cloud-based storage services Respondent breakdown: Respondents screened in by indicating involvement with mobile device management, policy development, and/or security at their organizations. Forty-one percent have 5,000 or more employees; 28% are over 10,000. Government, financial services, and healthcare are well-represented, and 36% are IT director/manager or IT executive management (C-level/VP) level. Want more? Visit InformationWeek Reports v © 2014 Property of UBM Tech; All Rights Reserved Top Concern: Stolen Devices © 2014 Property of UBM Tech; All Rights Reserved Top priority: securing company data on mobile devices © 2014 Property of UBM Tech; All Rights Reserved Nearly half report missing devices © 2014 Property of UBM Tech; All Rights Reserved Most did not require public disclosure © 2014 Property of UBM Tech; All Rights Reserved Secure corporate data on mobile device top reason for policy © 2014 Property of UBM Tech; All Rights Reserved Many companies allow personal mobile devices for work © 2014 Property of UBM Tech; All Rights Reserved Personal device policies vary © 2014 Property of UBM Tech; All Rights Reserved Do companies reimburse device purchases? © 2014 Property of UBM Tech; All Rights Reserved Do companies reimburse monthly phone bill? © 2014 Property of UBM Tech; All Rights Reserved More company-supplied devices on corporate network © 2014 Property of UBM Tech; All Rights Reserved Data storage on company-provided mobile device © 2014 Property of UBM Tech; All Rights Reserved Data storage on personal mobile device © 2014 Property of UBM Tech; All Rights Reserved Personal apps allowed on company-owned device? © 2014 Property of UBM Tech; All Rights Reserved Personal apps on personal device that accesses network? © 2014 Property of UBM Tech; All Rights Reserved Who’s responsible for mobile security policy? © 2014 Property of UBM Tech; All Rights Reserved Does security training include mobile use? © 2014 Property of UBM Tech; All Rights Reserved Most are confident of security controls © 2014 Property of UBM Tech; All Rights Reserved Authentication: username/password most common © 2014 Property of UBM Tech; All Rights Reserved Passwords: more than half require frequent changes © 2014 Property of UBM Tech; All Rights Reserved Data in transit: VPN secure tunnel most common © 2014 Property of UBM Tech; All Rights Reserved Most corporate devices allow public wireless access © 2014 Property of UBM Tech; All Rights Reserved Half allow all corporate devices to access social media © 2014 Property of UBM Tech; All Rights Reserved Data encryption methods vary © 2014 Property of UBM Tech; All Rights Reserved Why no encryption? © 2014 Property of UBM Tech; All Rights Reserved Govt. agencies: Is data classified? © 2014 Property of UBM Tech; All Rights Reserved Govt. agencies: data leak prevention used? © 2014 Property of UBM Tech; All Rights Reserved Govt. policies: internal vs. federal/state requirements © 2014 Property of UBM Tech; All Rights Reserved Govt.: most users do not circumvent security controls © 2014 Property of UBM Tech; All Rights Reserved Govt.: Do users carry multiple devices? © 2014 Property of UBM Tech; All Rights Reserved Job titles: most are IT managers/staff © 2014 Property of UBM Tech; All Rights Reserved Wide range of industries © 2014 Property of UBM Tech; All Rights Reserved Annual revenues vary © 2014 Property of UBM Tech; All Rights Reserved Many large companies © 2014 Property of UBM Tech; All Rights Reserved Research Synopsis Survey Name InformationWeek 2014 Mobile Security Survey Survey Date March 2014 Region North America Number of Respondents 371 Purpose To examine mobile security technology trends and strategies Methodology InformationWeek surveyed business technology decision-makers involved with mobile device management, policy development, and/or security at North American companies. The survey was conducted online, and respondents were recruited via an email invitation containing an embedded link to the survey. The email invitation was sent to qualified InformationWeek subscribers. Want more? Visit InformationWeek Reports © 2014 Property of UBM Tech; All Rights Reserved