Securing the office in your pocket

Securing the office in your pocket

By NIck Lowe | Jul 19, 2010

Over the past decade, enterprises have experienced a significant increase in workforce mobility.  Employees routinely connect to their offices from home PCs via VPN connections, use wireless hotspots in airports, and receive work emails on smartphone devices.  What’s more, organizations are offering access to partner and contractors.

While this drive for anytime, anywhere access to applications and resources offers advantages in terms of productivity and efficiency, it also introduces a number of significant security risks to the enterprise. 

First, there’s the diversity of remote access methods being used for business.  Some employees will use company laptops or home PCs to connect to the office via VPN links; some will process work emails on smartphones or handheld devices.  Another group may use wireless hotspots or Internet kiosks in public areas, or log in from PCs at partner or customer sites. 

Some of these remote endpoints are fully managed and under the control of the business IT team; others may be completely insecure and unmanaged.  Extending secure access across this wide range of methods and devices is a headache for any organisation.

Second, enterprises need to protect their sensitive company or customer information data against the risks of data breaches.  Corporate laptops and smartphones are all too easily lost or stolen, and often lack encryption – making them easy prey for thieves. 

Passwords, login credentials, and sensitive files can be left behind on untrusted devices at the end of a remote access session, making it available to subsequent users.  And of course there’s the ever-present threat of malware and malicious attacks, both from the web and from unsecured PCs.

Last, but by no means least, there’s the sheer cost of owning and managing a fleet of corporate laptops or portable devices, to allow mobile working.  These costs include the purchase price, software licensing, security applications, managing updates and patches, repairs and replacements, and so on. 

The checklist for remote working
Businesses need a solution that:
•    Gives flexible and secure access to information resources and applications from almost any location and type of PC 
•    Keeps sensitive data secure at all times against loss, theft or hacking 
•    Is cheaper to deploy and manage than a traditional laptop PC, to help reduce the total cost of ownership (TCO).

In addition, users shouldn’t have to waste time on issues such as unnecessary re-authentication or connection issues when using VPNs.  Nor should they have to remember to encrypt individual files or documents when they are copying or saving their work. 

Meeting this checklist of requirements could be fearsomely complex if conventional point security products were used – such as separate VPN, anti-virus, encryption, personal firewalling and intrusion prevention. 

 
 

Add comment

Post a Comment

The content of this field is kept private and will not be shown publicly.
Verification Code
This question is for testing whether you are a human visitor and to prevent automated spam submissions.
 

knowledge_central_tab

 
 
Knowledge Central
Trusted Mobility Index
The mobile ecosystem of devices, services and networks is at a critical inflection point.While the mobile revolution is unleashing massive opportunities in both emerging and mature economies, it is also increasing in complexity and confusion. The reality is the lightning-fast adoption of powerful, smart devices is outpacing society’s ability to secure them. Today, trust in mobility hangs in the balance.
The state of the Internet, Q4, 2011
Geography appears to play a role in frequency of observed attacks on specific ports. For example, Port 23 (Telnet) is a favorite target for attacks observed to be originating from South Korea and Turkey, where it accounted for more than five times the number of attacks targeting the next most popular port (445 in both countries). Other instances of geography-based port targeting include observed attacks centered on Port 1433 (Microsoft SQL Server) in China and on Port 80 (WWW/HTTP) in Indonesia.
 
 
 
HID Global deploys a centralized, web-based IP access control solution at Fuxi Power Plant
Unable to meet the needs for real-time monitoring with its traditional patrol system, China's Fuxi Power Plant has deployed HID Global's VertX V2000.
StubHub: How to spot fraud before it happens
Whenever a list of log-on credentials is dumped onto the Web, retailers get hit with waves of automated attacks. Here's how ticket marketplace StubHub fights the threat.