5 Steps To Establishing Network Security With BYOD Devices

Bring-Your-Own-Device policies are useful, but make sure to address the risks.

There is a lot to be said about establishing a Bring-Your-Own-Device (BYOD) policy in your business. It cuts down on IT costs and allows employees to use systems they already find comfortable and familiar. It enables everyone to have some flexibility in where they work and access data for business.

That said, BYOD policies also have inherent risks that require you to consider the security issues around keeping your business and customer data safe. The good news is that this is pretty easy to address.

Require that employees follow a robust password protocols

According to Verizon’s 2019 Data Breach Investigations Report, 80% of data breaches are caused by compromised, weak, and reused passwords. This is only part of the problem, though. While you may be having issues with employees practicing secure password protocols, there is also a very good chance that their passwords nave not only been already compromised but are up for sale on the dark web.

Because password theft has become so widespread, you need to establish a secure password protocol. Require employees not to use the same passwords at work as they do at home — even if they’re variations. Make sure they aren’t sharing their passwords with others as well. Wherever possible, require two-step authentication as an added measure for security.

Have employees notify you of lost devices

No one likes losing their mobile device — your employee, especially. Still, it happens from time to time. When it does (and let’s be honest, it likely will), make sure they notify you immediately. The sooner they tell you, the sooner you can take steps to protect your data by changing passwords, removing device ID permissions, and so forth.

Try not to be harsh with employees that might lose a device. If you penalize employees, they may be less likely to report a lost or stolen device until it’s too late.

Go over issues regarding wireless use

There is no doubt that WiFi and Bluetooth have done wonders for portability and productivity. All the same, they also usher in new risks. Unprotected or public WiFi networks can allow any number of bad actors into your system. Some can monitor your employee’s activity off their WiFi-connected mobile device to capture data, or even plant malware or spyware. Even though Bluetooth devices tend to operate more close-range, there is still the potential for illicit data capture to occur.

Require employees to switch off their WiFi and Bluetooth when their mobile devices aren’t in use. This will keep them from inadvertently connecting to an unsecured network. Ideally, you don’t want employees to use any public WiFi network whenever possible. So long as your data is in their hands, you need them to take security risks seriously.

Educate employees on how to avoid phishing scams

You probably already have policies in place in the office concerning phishing emails and similar scams. Do your policies extend out toward your employees’ personal devices? If they’re going to be engaging in a BYOD policy, how they handle potentially fraudulent emails and messages on their own devices has to be a concern regardless of whether or not they’re conducting business at the moment.

In other words, if an employee uses their device, they need to be as vigilant with their personal accounts as they are with work ones.

According to a 2019 PC Mag report, 83% of organizations surveyed reported experiencing phishing attacks the previous year. Just by knowing this fact, it’s more important than ever to get employees up to speed on phishing and hacking trends that could affect personal accounts and devices. Doing so will go a long way in helping avoid potentially crippling data breaches and malware attacks.

Have a BYOD exit policy for exiting employees

No matter the reasons why, when an employee leaves your employment, make sure they aren’t also leaving with your data. Before anyone leaves, require employees to present their device to you or your IT department to make sure that it has been cleared out of anything having to do with your business. Remind employees that this isn’t an issue of trust, but an issue of security and your business’s obligation to its clients.

Presenting mobile devices for clearing before exiting should be a part of your business’s written BYOD policy, signed by each participating employee, and part of any new employee’s information packet. This way, there are no surprises.

If you don’t have a BYOD policy in place now, get one started

Taking a sensible, security-minded approach to BYOD policies can have an enormous impact on keeping your business safe from data breaches and other cyber attacks. It also sends the right message to clients that you are serious about your obligations and responsibilities.

Set a firm BYOD policy sooner than later, and make sure to review and update it periodically to keep up with growing or evolving threats. Common-sense cybersecurity shouldn’t be an inconvenience, but more necessary for doing business and protecting your bottom line.

Thank you for reading. I’d love to share more with you via my Bi-Weekly Word Roundup newsletter sent to subscribers every other Sunday. It will feature news, productivity tips, life hacks, and links to top stories making the rounds on the Internet. You can unsubscribe at any time!