01:28 PM
Keith Ferrell
Keith Ferrell

Central Office IT Neglects Mobile Security: CDW Survey

Mobile security is very much a moving target -- one that too many businesses are either missing or not aiming at altogether, according to a newly released study.

Mobile security is very much a moving target -- one that too many businesses are either missing or not aiming at altogether, according to a newly released study.The CDW User-Proof IT Security Report (registration required for free download) surveyed just over 300 IT pros and found, among other things:

Nearly 70 percent of businesses have no mobile device security policy in place.

Top IT security concern is employee use of the Internet, particularly inappropriate content access, yet close to 60 percent of the companies have no content filters (much less blockers) in place.

Outside software being loaded onto company equipment and networks gives security a pain, too, but only four in ten have network auditware in place.

A couple of things make the CDW survey worth your time:

First, close to 40 percent of the respondents represented companies with fewer than 500 employees: that's a higher percentage of realworld midsize business respondents than is typical of security surveys lately.

Second, the survey was restricted to IT professionals whose companies actually had a written security policy in place --

This is a) precisely the sort of filter that makes surveys both more specific and more valuable and b) one of those quantifiable measures of the disconnect between your security policies and procedures (100 percent of the respondents have written policies in place but 70 percent of those policies don't address mobile issues at all? Come on!) and the very insecure realities your employees and co-workers are creating.

Good reading that's worth thinking about. And acting on.

Comment  | 
Print  | 
More Insights
Register for Dark Reading Newsletters
White Papers
Current Issue
Dark Reading Tech Digest, Dec. 19, 2014
Software-defined networking can be a net plus for security. The key: Work with the network team to implement gradually, test as you go, and take the opportunity to overhaul your security strategy.
Flash Poll
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
Published: 2015-02-27
The seg_write_packet function in libavformat/segment.c in ffmpeg 2.1.4 and earlier does not free the correct memory location, which allows remote attackers to cause a denial of service ("invalid memory handler") and possibly execute arbitrary code via a crafted video that triggers a use after free.

Published: 2015-02-27
The dns-sync module before 0.1.1 for node.js allows context-dependent attackers to execute arbitrary commands via shell metacharacters in the first argument to the resolve API function.

Published: 2015-02-27
Cross-site scripting (XSS) vulnerability in Unified Web Interaction Manager in Cisco Unified Web and E-Mail Interaction Manager allows remote attackers to inject arbitrary web script or HTML via vectors related to a POST request, aka Bug ID CSCus74184.

Published: 2015-02-27
Unquoted Windows search path vulnerability in Toshiba Bluetooth Stack for Windows before 9.10.32(T) and Service Station before 2.2.14 allows local users to gain privileges via a Trojan horse application with a name composed of an initial substring of a path that contains a space character.

Published: 2015-02-27
checkpw 1.02 and earlier allows remote attackers to cause a denial of service (infinite loop) via a -- (dash dash) in a username.

Dark Reading Radio
Archived Dark Reading Radio
How can security professionals better engage with their peers, both in person and online? In this Dark Reading Radio show, we will talk to leaders at some of the security industry’s professional organizations about how security pros can get more involved – with their colleagues in the same industry, with their peers in other industries, and with the IT security community as a whole.