登录查看更多内容

How do you ensure BYOD users and administrators understand their roles?

由人工智能和领英社区提供技术支持

Bring your own device (BYOD) is a popular trend that allows employees to use their personal devices for work purposes. However, BYOD also introduces security risks and challenges for both users and administrators. How do you ensure BYOD users and administrators understand their roles and responsibilities in protecting the organization's data and systems? Here are some tips to help you create a BYOD policy and culture that balances security and productivity.

此文章中的业界达人

由社区从 5 条内容中精选。了解更多

?? Zeeshan Kazmi, MBA, CISSP, NACD.DC

Global CISO CIO | Healthcare ● Medical Device ● Financial | Cyber Security Principal | Global Tech Executive | Board…

1 Define BYOD scope and eligibility

The first step is to define what devices, applications, and data are allowed and who can access them. You need to specify the minimum security requirements, such as encryption, password, antivirus, and firewall, for each device type and category. You also need to determine the level of access and control that administrators have over the devices, such as remote wipe, lock, or update. Additionally, you need to identify the legal and regulatory implications of BYOD, such as data ownership, privacy, and compliance.

添加您的观点

?? Zeeshan Kazmi, MBA, CISSP, NACD.DC

Global CISO CIO | Healthcare ● Medical Device ● Financial | Cyber Security Principal | Global Tech Executive | Board Director & Advisor | NACD Fellow | Raising the ROI in Technology?
举报内容
Clearly define the cost and productivity equation: - Is the primary allowance for BYOD for cost or productivity (choose one) - For top 3 data sources that will be made available through BYOD, perform a loss expectancy estimate to compare the annual recurring expectancy to that of saving cost or increasing productivity (average unloaded labor rate) - Refine the estimate by adding controls such as RBI, VDI, MAM - Add cost of a robust Data Loss Prevention (DLP) to the equation above - Have a governance discussion to decide continuing or introducing BYOD in light of data

已翻译

赞

加载更多内容

2 Communicate BYOD policy and expectations

The second step is to communicate the BYOD policy and expectations to all users and administrators. You need to explain the benefits and risks of BYOD, the roles and responsibilities of each party, and the consequences of non-compliance. You also need to provide clear and consistent guidelines, procedures, and resources for BYOD users and administrators, such as how to register, secure, and report devices, how to access and use data and applications, and how to handle incidents and breaches.

添加您的观点

3 Train BYOD users and administrators

The third step is to train BYOD users and administrators on how to follow the BYOD policy and expectations. You need to provide regular and relevant training sessions, workshops, and materials that cover the best practices and tips for BYOD security and productivity. You also need to test and assess the knowledge and skills of BYOD users and administrators, and provide feedback and support to improve their performance.

添加您的观点

?? Zeeshan Kazmi, MBA, CISSP, NACD.DC

Global CISO CIO | Healthcare ● Medical Device ● Financial | Cyber Security Principal | Global Tech Executive | Board Director & Advisor | NACD Fellow | Raising the ROI in Technology?
举报内容
In addition to what's been already mentioned, the art of communication is to do it within context and in exchange of value: - Messaging use terms at time of use - Making mandatory access controls enforced for device posture, non-repudiation, and DLP - Display banners and warnings often, along with usage guidelines in small snippets during logins or at time of communication exchange

已翻译

赞

4 Monitor and audit BYOD activities

The fourth step is to monitor and audit BYOD activities to ensure compliance and security. You need to use tools and methods that can track and analyze the devices, applications, and data that are connected to the organization's network and systems. You also need to review and report the results and trends of BYOD activities, and identify and address any issues or gaps that may arise.

添加您的观点

5 Update and improve BYOD policy and culture

The fifth step is to update and improve the BYOD policy and culture based on the feedback and findings from the previous steps. You need to evaluate the effectiveness and efficiency of the BYOD policy and culture, and make changes or adjustments as needed. You also need to involve and engage BYOD users and administrators in the process, and solicit their input and feedback on how to improve the BYOD policy and culture.

添加您的观点

Santosh Kamane

Cybersecurity and Data Privacy Leader | CISO Coach | Entrepreneur | PECB Certified ISO 42001 Trainer and advisor | Virtual CISO | GRC | DPO as a Service | Empowering Future Cybersecurity Professionals
举报内容
BYOD = Bring your own deviations BYOD is essentially bringing a new asset on your network that may not be securely configured to align with your best practices. This is a huge risk so its important to create an isolation layer between BYOD and corporate network while allowing min access. Even better, follow zero trust principles so devices /users are authenticated and authorised on each network segment. While user education is important, one must rather rely on preventive controls for BYOD risks. Administrators must ensure that they have right set of tools to monitor security status of BYOD devices and have ability isolate them, on demand.

已翻译

赞

6 Promote BYOD security awareness and culture

The sixth step is to promote BYOD security awareness and culture among all users and administrators. You need to create and share success stories, best practices, and tips that showcase the benefits and achievements of BYOD security and productivity. You also need to recognize and reward BYOD users and administrators who demonstrate good behavior and performance in following the BYOD policy and expectations.

添加您的观点

Keith Price

Chief Security Officer, CISO, CIO, Speaker, Board Advisor. Safety, Quality, and Resilience
举报内容
This is where the quality aspect of BYOD security can really shine. Treat your users like they should be: special with a focus on user experience and security doing its thing "under the hood". Host interactive sessions where users can ask questions and let them know they are an integral part of the success story. Recognize BYOD users who patch their own apps and reboot systems regularly to then complete the update cycle.

已翻译

赞

7 Here’s what else to consider

This is a space to share examples, stories, or insights that don’t fit into any of the previous sections. What else would you like to add?

添加您的观点

Information Security

+ 关注

给文章评分

我们借助人工智能创建了此文章。您认为这篇文章怎么样？

很棒不太好

举报此文章

查看全部

How do you ensure BYOD users and administrators understand their roles?

1

2

3

4

5

6

7

1 Define BYOD scope and eligibility

2 Communicate BYOD policy and expectations

3 Train BYOD users and administrators

4 Monitor and audit BYOD activities

5 Update and improve BYOD policy and culture

6 Promote BYOD security awareness and culture

7 Here’s what else to consider

Information Security

给文章评分

感谢您的反馈

更多Information Security相关文章

更多相关阅读内容

How do you ensure BYOD users and administrators understand their roles?

1

2

3

4

5

6

7

1 Define BYOD scope and eligibility

2 Communicate BYOD policy and expectations

3 Train BYOD users and administrators

4 Monitor and audit BYOD activities

5 Update and improve BYOD policy and culture

6 Promote BYOD security awareness and culture

7 Here’s what else to consider

Information Security

给文章评分

感谢您的反馈

查看其他技能