Iphone Security Survey: Survey Conducted By Vanson Bourne

iPhone Security Survey Survey conducted by Vanson Bourne

iPhone SME Security Survey Background 200 major organisations replied to a iPhone security survey Commissioned by Devicelock Conducted by Vanson Bourne Company Breakdown by Employees 114 Companies had between 250-499 Employees 86 Companies had 500-1000 Employees Company Breakdown by Industry 43 Companies were from Financial Services 50 Companies were from Manufacturing 46 Companies were from Retail, Distribution or Transport 61 Other Commerical Concerns

iPhone Security Survey Questions and Statements Posed

Statements Posed to Companies 1 Companies were asked Which of the following statements applied to your business? Available responses were  We monitor the use of smartphones across the organisation  We regard the iPhone to be no less secure as a business tool than any other smartphone  The IT Dept supports iPhones  Employees are banned from using smartphones for work purposes

Statements Posed to Companies 2 Companies were asked What are your biggest concerns around the iPhone as a business tool? Available responses were:  If lost or stolen, unauthorised users could access company data  The security threat posed by downloading applications on to the phone  Users are able to download company data without the IT Department knowing  Other

Questions Posed to Companies Companies were asked Have you taken steps to prevent security threats posed by iPhones? If no steps have been taken what reason best explains why Phones not widely used in organisation? Don’t think they are a threat? No budget?

iPhone Security Survey Responses

smartphone Monitoring Response 52% of companies surveyed monitored smartphone usage within their organisation The breakdown was as follows; 51% of 43 companies from Financial services 58% of 50 companies from Manufacturing 48% of 46 companies from Retail, Distribution or Transport 51% of 61 companies from other Commercial Businesses

48% of companies surveyed had no idea whether data leakage, malware infection, ID theft was occuring via smartphones within their organisation

Perspective on iPhone Security 43% of companies surveyed regarded the iPhone to be no less secure as a business tool than any other smartphone The breakdown was as follows; 46% of 43 companies from Financial services 42% of 50 companies from Manufacturing 45% of 46 companies from Retail, Distribution or Transport 39% of 61 companies from other Commercial Businesses

The IT Dept Supports iPhones 29% of companies surveyed had IT departments that supported iPhones The breakdown was as follows; 27% of 43 companies from Financial services 24% of 50 companies from Manufacturing 34% of 46 companies from Retail, Distribution or Transport 30% of 61 companies from other Commercial Businesses 71% of companies do not have iPhone support in place. Not an issue if iPhones are banned or not used But what about other smartphones? What happens when those phones are stolen or lost?

Smartphones are Banned 14% of companies surveyed had banned all smartphones The breakdown was as follows; 12% of 43 companies from Financial services 18% of 50 companies from Manufacturing 14% of 46 companies from Retail, Distribution or Transport 13% of 61 companies from other Commercial Businesses 86% of companies allow smartphones usage in their companies. There are many business efficiencies caused by this, However Today’s mobile phones need to be viewed as Corporate devices that require security considerations Just like any other compute device.

Biggest Security Concerns Around iPhone In response to the question regarding he biggest concerns around th iPhone as a business tool The breakdown was as follows; 65% of companies were concerned about lost or stolen phones 52% of companies were concerned about downloaded applications 40% of companies were concerned about data leakage

ID Theft, malware, botnets and data leakage Have all become major threat vectors To Organisational security From the majority of mobile phones

Have You Taken Steps To Secure iPhone? Have you taken any steps to secure you business against the security threat posed by iphones? 36% of companies responded yes 64% of companies responded no

According to the press release: While 65 per cent of IT decision makers recognised that unauthorised users could access valuable company data through the iPhone, 64 per cent said they had not taken any steps to secure company data against this threat.

Re tai l, d ist rib ut Fin Ot ion he an M rc o an cia rt om u ls r f a ac er ns me tu vic p rci or rin es t al g

Have You Taken Steps To Secure iPhone?

0 % 10 % 20 % 30 % 40 % 50 % 60 % 70 % 80 %

Financial services

Manufacturing

Retail, distribution or transport

Other commercial

No

59 %

59 %

71 %

65 %

Yes

41 %

41 %

29 %

35 %

Reasons for not Securing iPhone? The 122 (64%) respondents that answered no to taking steps securing against the iPhone threat were then given three reasons why they had not taken steps to secure against the iPhone 77% of companies responded that it was not widely used across the organisation 16% of companies responded that they didn’t believe it was a threat 7% of companies responded that they didn’t have any budget Although the survey was designed specifically around iPhones, the fact is that the majority of mobiles used today contain customer details and can hold corporate data. To truly understand this threat see the article Your Mobile - Our Weapon of Choice On www.securityvibes.com/uk

Summary  Smartphones are rapidly becoming the norm  Companies need to think how they will defend against this escalating threat vector  Some are adopting the same stance they have with regard to social networks (ie to ban usage on company premises)  Those that allow smart phones, need to discuss with the IT and Security departments the best way forward in terms of Organisational policy Technological Defences User awareness  If are viewing these slides you still don’t understand the variety of threat vectors posed by mobile phones then do read the article Your Mobile – Our Weapon of Choice