Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.


12:40 PM
Connect Directly

How Cloud, Mobile Are Changing IT, Security Management: Study

The evolution of technology is changing the role of IT and security pros as more employees use cloud apps and connect personal devices to corporate networks.

Nearly half of North American end-users claim they connect more personally owned devices to corporate networks than they did 10 years ago. Sixty percent of IT pros around the globe claim their businesses permit the use of cloud-based apps.

Both statistics point to the future of productivity and sources of security concern for IT managers. The data points come from two surveys conducted by IT management software provider SolarWinds in celebration of IT Professionals Day on Sept. 20.

Researchers aimed to demonstrate the evolution of IT management beyond corporate-owned devices and on-premises technology. This growth is placing greater demand on IT pros to manage technologies outside their traditional scope of control.

"Our surveys reveal that more than ever, end users are connecting more devices, including those personally-owned, to corporate networks; relying on cloud-based applications; and working outside the four walls of traditional offices," said Joseph Kim, senior vice president and CTO of SolarWinds. 

These findings have significant implications for the future of enterprise security and strategies for protecting organizations from cyberattacks.

Today's businesses are handling more devices than ever on their corporate networks. Lean Adato, head geek and technical evangelist at SolarWinds, notes how the increase in personal device usage has driven end-users' expectations for support from their IT departments.

"At this point, it's a given that people will get to their office with a smartphone, maybe a tablet, and a laptop in addition to their work device," he explains. "You will be supporting these devices, that's just a fact of the matter."

Ten years ago, the iPhone hadn't yet launched. There were no personal phones to connect to the corporate network, and IT and security teams didn't support personal devices because there were so few in the workplace. Now they face the challenge of securing their networks with many outside devices.

The rapid rise of cloud-based applications is also posing a major security risk, says Adato. More than 70% of companies estimate end users "at least occasionally" use non-IT-sanctioned cloud-based apps.

"There are companies that have things locked down, where non-IT-sanctioned cloud-based apps can't be used, but honestly they are few and far between," he says.

Adato points to SolarWinds' discovery that 60% of IT pros claim their businesses facilitate cloud-based apps. This number seems low, he says, noting he doesn't know anyone who isn't using tools like DropBox, Trello, or Slack to be productive.

The challenge is not in knowing whether 40% of respondents forbid cloud apps: It's that these organizations have different definitions of what "cloud-based" means.

Some organizations call an app cloud-based when they buy a cloud server, put one of their apps on the server, and let users run it from there. Defined narrowly like this, the 60% statistic makes sense, explains Adato, but many cloud tools fall outside this narrow scope.

It's difficult to condemn the growth of cloud-based apps because so many of them drive productivity. However, they also pose a security risk.

"They really are changing the way people are getting work done, and changing it for the better," he says. "But the users' tendency to avoid anything that has to do with security means this wonderful, collaborative, game-changing workplace is just asking for trouble in terms of security breaches."

Just as IT pros can expect the rise of personal devices in the workplace, they can anticipate a broader transition to the cloud. This means understanding infrastructure and the definition of cloud-based apps, which businesses leaders won't think about. They'll also have to navigate hybrid IT environments, as many business apps run both in the cloud and on servers.

Cloud apps make it easier for businesses to be successful by helping people enjoy the work they do, which is a "compliment that comes with a consequence," notes Adato. If employees are working around the clock, so too are IT pros.

The reality is users are willingly working longer days. Tech teams are wired to help, but the challenge is finding a way to address the needs of users who are always online without burning out.

"In IT, if the crisis continues beyond 5:30PM, you do, too," he explains. "It's always been a problem and it's always been something we in IT have done very badly."

He recommends companies begin to consider monitoring tools, which can constantly watch for threats and keep things stable so tech pros can focus on other tasks. For many companies, monitoring is still a manual task on someone's to-do list; in the future, it should be seen as its own discipline spanning storage, virtualization, and cloud.

Related Content

Kelly Sheridan is the Staff Editor at Dark Reading, where she focuses on cybersecurity news and analysis. She is a business technology journalist who previously reported for InformationWeek, where she covered Microsoft, and Insurance & Technology, where she covered financial ... View Full Bio

Recommended Reading:

Comment  | 
Print  | 
More Insights
Newest First  |  Oldest First  |  Threaded View
User Rank: Apprentice
9/22/2016 | 1:11:49 AM
Very Good Post
Decent to visit your web journal once more, i was simply perusing along and happened upon your site. simply needed to say great site and this article truly helped me.Really i value the exertion you made to share the knowledge.The theme here i found was truly compelling to the point which i was scrutinizing for quite a whileNice to be visiting your blog again, i was just browsing along and came upon your blog. just wanted to say good blog and this article really helped me.Really i appreciate the effort you made to share the knowledge.The topic here i found was really effective to the topic which i was researching for a long time


COVID-19: Latest Security News & Commentary
Dark Reading Staff 10/13/2020
Where Are the 'Great Exits' in the Data Security Market?
Dave Cole, Cofounder and CEO, Open Raven,  10/13/2020
Overcoming the Challenge of Shorter Certificate Lifespans
Mike Cooper, Founder & CEO of Revocent,  10/15/2020
Register for Dark Reading Newsletters
White Papers
Current Issue
Special Report: Computing's New Normal
This special report examines how IT security organizations have adapted to the "new normal" of computing and what the long-term effects will be. Read it and get a unique set of perspectives on issues ranging from new threats & vulnerabilities as a result of remote working to how enterprise security strategy will be affected long term.
Flash Poll
How IT Security Organizations are Attacking the Cybersecurity Problem
How IT Security Organizations are Attacking the Cybersecurity Problem
The COVID-19 pandemic turned the world -- and enterprise computing -- on end. Here's a look at how cybersecurity teams are retrenching their defense strategies, rebuilding their teams, and selecting new technologies to stop the oncoming rise of online attacks.
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
PUBLISHED: 2020-10-19
A prototype pollution vulnerability has been found in `object-path` <= 0.11.4 affecting the `set()` method. The vulnerability is limited to the `includeInheritedProps` mode (if version >= 0.11.0 is used), which has to be explicitly enabled by creating a new instance of `object-path` and settin...
PUBLISHED: 2020-10-19
On Windows the Veyon Service before version 4.4.2 contains an unquoted service path vulnerability, allowing locally authenticated users with administrative privileges to run malicious executables with LocalSystem privileges. Since Veyon users (both students and teachers) usually don't have administr...
PUBLISHED: 2020-10-19
An exploitable denial of service vulnerability exists in the ENIP Request Path Logical Segment functionality of Allen-Bradley Flex IO 1794-AENT/B 4.003. A specially crafted network request can cause a loss of communications with the device resulting in denial-of-service. An attacker can send a malic...
PUBLISHED: 2020-10-19
An exploitable denial of service vulnerability exists in the ENIP Request Path Logical Segment functionality of Allen-Bradley Flex IO 1794-AENT/B 4.003. A specially crafted network request can cause a loss of communications with the device resulting in denial-of-service. An attacker can send a malic...
PUBLISHED: 2020-10-19
A flaw was found in Infinispan version 10, where it permits local access to controls via both REST and HotRod APIs. This flaw allows a user authenticated to the local machine to perform all operations on the caches, including the creation, update, deletion, and shutdown of the entire server.