Risk
6/25/2008
01:28 PM
Keith Ferrell
Keith Ferrell
Commentary
50%
50%

Central Office IT Neglects Mobile Security: CDW Survey

Mobile security is very much a moving target -- one that too many businesses are either missing or not aiming at altogether, according to a newly released study.

Mobile security is very much a moving target -- one that too many businesses are either missing or not aiming at altogether, according to a newly released study.The CDW User-Proof IT Security Report (registration required for free download) surveyed just over 300 IT pros and found, among other things:

Nearly 70 percent of businesses have no mobile device security policy in place.

Top IT security concern is employee use of the Internet, particularly inappropriate content access, yet close to 60 percent of the companies have no content filters (much less blockers) in place.

Outside software being loaded onto company equipment and networks gives security a pain, too, but only four in ten have network auditware in place.

A couple of things make the CDW survey worth your time:

First, close to 40 percent of the respondents represented companies with fewer than 500 employees: that's a higher percentage of realworld midsize business respondents than is typical of security surveys lately.

Second, the survey was restricted to IT professionals whose companies actually had a written security policy in place --

This is a) precisely the sort of filter that makes surveys both more specific and more valuable and b) one of those quantifiable measures of the disconnect between your security policies and procedures (100 percent of the respondents have written policies in place but 70 percent of those policies don't address mobile issues at all? Come on!) and the very insecure realities your employees and co-workers are creating.

Good reading that's worth thinking about. And acting on.

Comment  | 
Print  | 
More Insights
Register for Dark Reading Newsletters
White Papers
Cartoon
Latest Comment: yup
Current Issue
Flash Poll
Video
Slideshows
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2014-6628
Published: 2015-05-28
Aruba Networks ClearPass Policy Manager (CPPM) before 6.5.0 allows remote administrators to execute arbitrary code via unspecified vectors.

CVE-2015-1389
Published: 2015-05-28
Cross-site scripting (XSS) vulnerability in Aruba Networks ClearPass Policy Manager (CPPM) before 6.4.5 allows remote attackers to inject arbitrary web script or HTML via the username parameter to tips/tipsLoginSubmit.action.

CVE-2015-1392
Published: 2015-05-28
Multiple SQL injection vulnerabilities in Aruba Networks ClearPass Policy Manager (CPPM) before 6.4.5 allow remote administrators to execute arbitrary SQL commands via unspecified vectors.

CVE-2015-1550
Published: 2015-05-28
Directory traversal vulnerability in Aruba Networks ClearPass Policy Manager (CPPM) before 6.4.5 allows remote administrators to execute arbitrary files via unspecified vectors.

CVE-2015-1551
Published: 2015-05-28
Directory traversal vulnerability in Aruba Networks ClearPass Policy Manager (CPPM) before 6.4.4 allows remote administrators to read arbitrary files via unspecified vectors.

Dark Reading Radio
Archived Dark Reading Radio
After a serious cybersecurity incident, everyone will be looking to you for answers -- but you’ll never have complete information and you’ll never have enough time. So in those heated moments, when a business is on the brink of collapse, how will you and the rest of the board room executives respond?