Commentary

What Makes A CIO Shudder?

It's mobile workers saying, "Security is not my job."

It's mobile workers saying, "Security is not my job."And apparently, that's how many of them feel, according to a new survey of more than 700 mobile workers in seven countries (China, Germany, India, Singapore, South Korea, the United States, and the United Kingdom), sponsored by Cisco and the National Cyber Security Alliance, and conducted by market research firm InsightExpress.

Problem number one: a laissez-faire attitude by mobile workers toward wireless security. Almost three-quarters of survey respondents (73%) say they're not always cognizant of security threats and best practices when they're working wirelessly. Asked why they're lax in their security behavior, many mobile workers offered reasons like: "I'm busy and need to get work done;" "Security just is not top-of-mind for me;" and "It's IT's job, not mine."


More Global CIO Insights

White Papers

More >>

Reports

More >>

Webcasts

More >>

Some insecure wireless practices respondents admitted to in the survey are shocking in their obviousness. For example, almost half (44%) of mobile workers surveyed say they open emails and/or attachments from unknown or suspicious sources. But why, when such practices have been emphatically discouraged for so long in the corporate environment? More than three-quarters (76%) say it's more difficult to identify suspicious e-mails and files on PDAs and smartphones than on laptops because the screens are much smaller.

One-third of mobile workers admit to accessing unauthorized wireless connections, such as hijacking a neighbor's wireless connection or jumping onto unauthorized connections in public places. Top Reasons: "Mine isn't working;" "They don't know so it's OK;" "I don't want to pay for my own connection."

Wireless security is an obvious priority for CIOs. According to InformationWeek Research's tenth annual Global Information Security Survey of more than 3,000 business technology and security professionals in the United States and China, most companies are feeling as vulnerable to security threats as they were a year ago, or more so. Second on the list of reasons for that vulnerability: "More ways to attack corporate networks, including wireless."

Hand-in-hand with decreasing vulnerability is the necessity to get all employees involved in the security effort. Third on the list of security challenges for this year, according to InformationWeek survey respondents: "Enforcing security policies."

The good news: according to InformationWeek survey respondents who admitted to security breaches in the last year, "Mobile (wireless) applications intrusion(s)" were low on that list, with only 7% of respondents in the United States and 6% in China reporting such breaches.

The bad news: If mobile workers continue with their laissez-faire attitude toward security, those numbers are bound to rise.


Related Reading




Currently we allow the following HTML tags in comments:

Single tags

These tags can be used alone and don't need an ending tag.

<br> Defines a single line break

<hr> Defines a horizontal line

Matching tags

These require an ending tag - e.g. <i>italic text</i>

<a> Defines an anchor

<b> Defines bold text

<big> Defines big text

<blockquote> Defines a long quotation

<caption> Defines a table caption

<cite> Defines a citation

<code> Defines computer code text

<em> Defines emphasized text

<fieldset> Defines a border around elements in a form

<h1> This is heading 1

<h2> This is heading 2

<h3> This is heading 3

<h4> This is heading 4

<h5> This is heading 5

<h6> This is heading 6

<i> Defines italic text

<p> Defines a paragraph

<pre> Defines preformatted text

<q> Defines a short quotation

<samp> Defines sample computer code text

<small> Defines small text

<span> Defines a section in a document

<s> Defines strikethrough text

<strike> Defines strikethrough text

<strong> Defines strong text

<sub> Defines subscripted text

<sup> Defines superscripted text

<u> Defines underlined text

InformationWeek encourages readers to engage in spirited, healthy debate, including taking us to task. However, InformationWeek moderates all comments posted to our site, and reserves the right to modify or remove any content that it determines to be derogatory, offensive, inflammatory, vulgar, irrelevant/off-topic, racist or obvious marketing/SPAM. InformationWeek further reserves the right to disable the profile of any commenter participating in said activities.

Disqus Tips To upload an avatar photo, first complete your Disqus profile. | View the list of supported HTML tags you can use to style comments. | Please read our commenting policy.
T-Shirt Giveaway T-Shirt Giveaway: Each week we're selecting one great comment from our readers. The author of the comment will receive an InformaitonWeek Community t-shirt. So get posting!
Subscribe to RSS

Resource Links