Today, small businesses (with fewer than 25 employees) and start-ups devices and mobile technologies at almost the same rate as large enterprises. However, most are not sufficiently informed about security issues, and lack the technical expertise and the necessary budget to properly protect mobile devices, whether they belong to the company or its employees (BYOD).
A recent survey of 3,900 IT professionals from around the world highlighted the challenges they faced over the past 12 months. 36% of respondents from Europe said they had managed to integrate mobile devices into the daily operations of small businesses and start-ups. Notably, this percentage is almost identical to the mobile adoption rate for large enterprises, which is 37% in Europe. This means that smaller companies are adopting mobile technologies at the same rate as very large enterprises, which have over 5,000 employees!
While the use of mobile technologies may not be limited by business size, there are other key factors to consider. Expertise and resources are the most obvious barriers for small businesses, which often lack the specialized staff to implement technology applications. These limitations can create problems even for small business owners who are fairly knowledgeable about security issues.
For example, 43% of small businesses in Europe listed “mobile device security” among their top three IT priorities for the next 12 months. However, when asked about their policies regarding BYOD (Bring Your Own Device), where employees use their personal mobile devices for business purposes, the survey revealed a significant difference in perception depending on the size of the company, with only 10% of small businesses having adopted such practices.
When asked about technology trends, 22% of small business and start-up from Europe agreed that the BYOD introduces a significant cybersecurity risk. However, the corresponding percentage for large companies and enterprise organizations was almost double, with 53% and 42% respectively, agreeing that BYOD adoption leads to risks.
So, is it possible that small businesses are overlooking the fact that employee-owned mobile devices could be a security risk? This is a particularly concerning prospect, given that small businesses are more likely to view the use of employee-owned devices as a cost-saving measure. The most common threats to employee-owned mobile devices include malware, rogue apps connecting to the corporate network through the employee’s device, and the theft or loss of devices that can lead to loss of corporate data.
What can start - ups and small businesses do?
Despite limited financial resources and a potential lack of expertise around advanced security solutions, small businesses and start-ups can leverage mobile technology – including employee-owned devices – without having to invest a lot of time or money. By combining common sense with the right technology, they can largely ensure the protection of mobile devices and focus on their daily operations.
1) Employee Education: Employees are the first line of defense in protecting a company’s data. Companies should ensure that new employees know that if their smartphones or tablets contain workplace-related information, they should not be subjected to unnecessarily risky usage habits (e.g., browsing questionable websites). Also, if a device is lost or stolen, the incident should be reported to the company immediately.
2) Basic anti-theft protection: Adopting a software solution that can remotely wipe data from a lost or stolen device is essential, but it’s also quite cost-effective. Some devices have built-in anti-theft features, and there are many third-party applications that can be used for this purpose. Of course, in this case, the employee should be aware that if data is deleted from their device, personal information stored on it is usually also lost. This means that employees should maintain back-up files.
3) Avoid complexity: A newly established start-up with a few employees cannot afford to spend many hours purchasing, implementing, and managing enterprise-grade security solutions that were not developed for their own needs. Therefore, small companies should avoid purchasing a product that is “bigger” than their actual needs and be content with the fundamental functions for securing their mobile devices.
To meet the needs of small businesses and start-ups, Kaspersky Lab offers Kaspersky Small Office Security, which includes essential mobile protection features, such as anti-malware, anti-theft and application control technologies. The solution includes essential mobile device management, data encryption and endpoint security tools in an easy-to-use interface that can be set up in just a few minutes.
On the Kaspersky Lab website, visitors can find more information about Kaspersky Small Office Security and the mobile technologies . Finally, especially for small businesses and start-ups, Kaspersky Lab has developed an online guide with detailed information on mobile security technologies and the BYOD trend.
