www.isologyhub.com Information Security BYOD - Bring Your Own Device original source www.ncsc.gov.uk Information Security BYOD - Bring Your Own Device BYOD Bring Your Own Device Essentially there is nothing wrong with the concept of
"www.isologyhub.com Information Security BYOD -" is the property of its rightful owner. Permission is granted to
download and print the materials on this website for personal, non-commercial use only, and to display it
on your personal computer provided you do not modify the materials and that you retain all copyright
notices contained in the materials. By downloading content from our website, you accept the terms of this
agreement.
Presentation Transcript
01
www.isologyhub.com Information Security BYOD - Bring Your Own Device original source www.ncsc.gov.uk<br>
02
Information Security BYOD - Bring Your Own Device<br>
03
BYOD – Bring Your Own Device Essentially there is nothing wrong with the concept of ‘Bring your own device’ (BYOD); it’s the way that organisations control BYOD that makes the difference between a secure and unsecure system.
Create an effective BYOD Policy: Ensure that personally-owned devices are only able to access business data that the user is authorised to see and use.
Encourage staff agreement: A business should communicate its BYOD policy through employee training so they understand their responsibilities when using personally-owned devices for work purposes<br>
04
BYOD – Bring Your Own Device Employee Compliance: Employees should be prepared to update and maintain security protocols for anti-virus protection whilst using their own device for business.
Limit the information shared by devices: Employees are used to sharing their information with other users and in the cloud. The automated backup of device data to cloud based accounts can lead to business data being divulged.<br>
05
BYOD – Bring Your Own Device Consider using technical controls: Container applications and technical services such as Mobile Device Management can help you remotely manage personally-owned devices, but they can impact the usability of the device.
Plan for security incidents: When incidents occur, act quickly to limit losses. An organisation should be able to remotely wipe sensitive data from a personally-owned device if it is lost or stolen.<br>
06
BYOD – Bring Your Own Device Anticipate increased device support: An organisations services may need to be accessed by different types of devices, so ensure that you have the IT support capability and expertise to manage a growing range of devices.
Understand the legal issues relating to PII: The legal responsibility for protecting other people’s personal information is with the data controller, not the device owner. What are the requirements of the data controller about the use of personal devices for the management of the PII for which they are responsible<br>
07
BYOD – Bring Your Own Device Understand the legal issues relating to software: The licence of software loaded on personal devices belongs to the business and must be removed during the termination of employment process.<br>
