As technology becomes more and more integrated, your employees are carrying your company data and networks with them. While you used to be able to protect your own data onsite, now your employees can open emails in a coffee shop, or access your server while waiting in a drive-through line.
Whether via phone, tablet or laptop, every time an individual logs into your network, they provide an opportunity for bad actors and cyber criminals to walk right in behind them. The need for mobile device security has never been more critical and essential for organizations and businesses of any size. If you have important data, it must be protected – no matter where or how it travels.
The challenge is, of course, protecting devices which are in your employee’s possession. You could set up protocols which only allow access to your network from secured devices, but that will severely limit the productivity of employees, especially those on the move like salespeople and delivery personnel.
Training is an important aspect of alerting employees to the need for mobile device security. You may wish to limit access to your networks only to those who absolutely need to be online to do their job – at least if they are not in the secure environment of your office. For those who will be accessing the network once they leave the 4 walls, consider these precautions.
1. Strong passwords/biometrics
Strong passwords have long been the sentries at the data door – and the processes are getting necessarily more complex. All of your logins should require strong passwords which are eight or more characters long and contain alphanumeric characters. Two-factor authentication should be used whenever possible, and if biometrics (such as fingerprint recognition) are available, use them. In fact, you may even wish to provide “work-only” devices to those who will be accessing your networks offsite, and make sure these devices are equipped with all these features.
Everyone hates these passwords – and even more so they get annoyed at the requisite need to change them passwords every 2-3 months. However, this is the price that must be paid for the greatest protections to be in place.
2. Protect against public Wi-Fi with VPNs
Most free Wi-Fi locations are not encrypted, and the open networks permit bad actors to monitor network traffic, scooping up passwords, usernames and other sensitive data with ease.
Installing a VPN (Virtual Private Network) client on your employee’s devices should be considered mandatory. A VPN will allow secure connection and any browsing activity, even on a public network will be protected from malicious prying eyes. VPNs will also protect your employees from falling victim to threats and spying which can reside on less secure or untrusted sites.
Here’s a hint: when in public, get employees into the habit of turning off their wireless (WiFi) connectivity. This will avoid users logging onto a nearby network without even meaning to – and will help to save battery life.
3. Encrypt your employee’s devices
Most mobile devices these days have built-in encryption features. Encryption makes data unreadable as it travel from place to place, preventing unauthorized access and theft. Be sure to help your employees to access and utilize these mobile device security tools.
4. Always Employ Antivirus
Sometimes the problem doesn’t exist with people spying and stealing, but with the data your employees access – which may be hiding malicious code. Once the code is on your device, it is launched before you know what happened. A reputable antivirus software application will help to ensure your security.
There are many robust antivirus applications to choose from. You may wish to consider buying licenses and installing on all devices which your employees may use to access your network from remote locations.
These are just a few of the steps you can take to ensure mobile device security. It is recommended that if you do not have a professional security expert on staff, call in some reinforcements! The team at Alliance IT can help you to assess your current level of vulnerability, put the right security measures in place, and assist with staff training.
When it comes to protecting your company data, you can’t afford to ignore the threats. Call Alliance IT today.
