Helping to protect workplace mobile devices

Why should I protect mobile devices?

Mobile devices have become an essential part of many businesses’ day to day operations. They let you communicate with your team and customers, access business apps on the go, and work more flexibly from a range of places.

With this comes the need to ensure they’re protected with the right cyber security solutions and best practices. And for good reason. A study by Finder.com estimated Australians were losing smartphones at a rate of 1,370 per day. Not only could this impact their ability to work effectively, but it also increases the potential for business data to be accessed by opportunist criminals.

Further complicating matters is the blurring of lines between personal and work mobile devices. You may use the same mobile for work and personal use and let your team do the same. If this is the case, it pays to make sure you’re clear on what security measures are in place to protect your business data and communications.

Cyber security best practices and solutions should be applied consistently, no matter where the device comes from, or how it’s used.

How to protect your mobile devices

There are several things you can do to help protect your workplace mobile devices:

• Educating yourself and your team to build a cyber secure mindset
• Outlining clear policies and processes for your team
• Choosing a mobile security solution that’s right for your business

How you choose to tackle mobile device security depends on what’s right for your business. There’s no one-size-fits-all approach. Different solutions offer different features, based upon the size and scope of business.

Building a cyber secure mindset

A solid defence against cyber criminals is to have a strong culture of cyber security awareness.

Phishing awareness teaches people how to identify suspicious looking emails or SMS messages. For example, links to supposedly unpaid road toll charges or mobile phone bills.

Help your employees by making them aware of the threats to look out for, and not to click on any suspicious links. For example, a Cyber Wardens programme is a great way to create practical behavioural change.

While facial recognition is used on many mobile devices, employees may still need to use passwords to access workplace applications. Train them on the importance of strong passwords and encourage the use of password managers.

Multi-factor authentication can also boost security. Make sure you set it up when it’s available on business apps you might be using.

These tactics will help you and your employees feel better equipped to recognise and respond to potential threats. Importantly, remember to regularly review and update your training program to stay in line with current and emerging threats.

Outline clear processes

Providing clear direction on mobile phone policies and procedures helps employees better understand their obligations, particularly in light of hybrid working.

More and more, people use their own devices in the workplace, known as ‘bring your own device’ (BYOD). BYOD is popular among employees for its convenience, but there might be confusion as to how it’s covered in your policies.

Be sure to explain what your BYOD policy is. Outline the cyber security measures employees should take on their personal devices if they’re using them to access company files and data.

What to consider in a BYOD policy

As a guide, some points you might want to consider in a policy include:

• Have the most up-to-date security software, encryption, and strong passwords
• Define appropriate use and the types of work-related tasks that can be performed
• Recommend or require regular data backups

Establish clear guidelines for installing and using applications, no matter if it is a personal or workplace device. You can also consider using a mobile application management solution, which helps control and enforce policies on mobile devices.

Choosing a cyber security solution

Mobile-specific security solutions can be an effective way of boosting the security of your mobile devices. This is especially relevant if your employees are using applications or the company network to access sensitive company data.

What type of protection features should you consider?

Mobile device protection comes in many forms. The best solution for your business depends on the features and functionality your users need. Here are some things to consider.

Application protection

This can help prevent malware from being downloaded onto employees’ devices by detecting and blocking malicious apps in real-time.

Network protection

This can cover a range of capabilities to help keep mobile devices secure, including:

• Anti-phishing to help block phishing attacks across all applications on a mobile phone.
• Safe browsing to help block access to malicious sites from any browser.
• Anti-bot to help block communication to command-and-control servers. This is a when computer controlled by a hacker is used to send commands to a mobile phone or other device compromised by malware.
• Wi-Fi Network Security to help identify Man-in-the-Middle attacks. This is when a hacker secretly places themselves in between two parties e.g. an employee and a company server and relays or possibly alters the communications between two parties.

Operating system and device protection

This can help protect mobile devices against compromise with real-time risk assessments.

Helping keep your business secure

Australians are using a growing range of mobile apps in their personal and work lives. So, to stay on top of potential cyber security risks you need to invest time in making sure you have the right strategies in place to protect your business.

Fostering a cyber secure culture with clear processes and making sure you have the right solutions in place, can go a long way towards helping protect your business.