Bring Your Own Device: Benefits, risks and control techniques

Shumate, Thomas; Ketel, Mohammed

doi:10.1109/secon.2014.6950718

Cited by 21 publications

(30 citation statements)

References 4 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Often, the unintended administrators have different device types, making it difficult to trace the update and to patch the operating system. Shumate and Ketel () identified several other risks associated with the unintended administrator, including malware attacks and the loss of important documents that may be stored on such devices in the event that the employee leaves the organisation.…”

Section: The Risks Posed By the Unintended Administratormentioning

confidence: 99%

The bring‐your‐own‐device unintended administrator: A perspective from Zimbabwe

Musarurwa

Flowerday

Cilliers

2019

E J Info Sys Dev Countries

View full text Add to dashboard Cite

As bring your own device (BYOD) becomes part of workplace tools for employees in Zimbabwe, the responsibility to implement information security management methods, which was traditionally confined to the information technology (IT) employees, has extended to all the employees, who now become unintended administrators because of the usage of their devices. The purpose of this paper is to show how banks can mitigate the information security risks caused by the unintended administrator using the BYOD information security behavioural (BISB) model. A literature review of the BYOD information security and organisational information security culture was conducted. A questionnaire was developed from the literature and sent to 270 bank employees in Zimbabwe. A total of 205 employees participated, and 179 completed the questionnaire. An expert review consisting of chief information officers (CIOs) at banks in Zimbabwe was conducted to evaluate the proposed model. From the literature review, individual traits of attitude, knowledge, and habit, as well as organisational traits of the environment, governance, and training, were identified as key traits that constituted the constructs of the BISB model. The overall theme of this paper is that banks can mitigate the BYOD information security challenges by using of the BISB model. KEYWORDSbring your own device, BYOD information security behavioural model, information security culture, unintended administrator This paper starts by providing an overview of how BYOD has affected the way IS is managed in organisations and indicates how the employees who own such devices have become unintended administrators in the BYOD phenomenon. The security risks that the unintended administrators introduce to the organisation because of BYOD forms the research problem that this paper attempts to address. The identification of individual and organisational traits forming the constructs for the BYOD information security behavioural (BISB) model is then discussed, which leads to the statistical survey that tested these constructs.The next section discusses the background on the emergence of the unintended administrator in the workplace. | BACKGROUNDBYOD is emerging as the new norm in modern business computing trends. All organisations that are serious about remaining relevant in the digital era are searching for BYOD security solutions (Brodin, 2016a). Digital transformation visionaries such as Wood (2004) and Morrow (2012) share the sentiment that IS in all organisations is now multidisciplinary, multidepartmental, and multiorganisational. This paper explores the multidepartmental nature of IS. Lim and Churchill (2016) further argue that the management of IS in earlier decades was strictly technical and fell under the exclusive management of an organisation's information technologists. Since 2010, a shift occurred away from specialised management of IS by IT administrators to the management of IS by employees in the various departments of the organisation (Keyes, 2013). The management of IS has al...

show abstract

Section: The Risks Posed By the Unintended Administratormentioning

confidence: 99%

The bring‐your‐own‐device unintended administrator: A perspective from Zimbabwe

Musarurwa

Flowerday

Cilliers

2019

E J Info Sys Dev Countries

View full text Add to dashboard Cite

show abstract

“…This is a greater concern when personally identifying or confidential client information is downloaded to the device [10,32,34]. When the device is owned by the company there can be a simple fix of remotely wiping the device, but when the device is owned by an employee this can be less than simple.…”

Section: B Lost or Stolen Devicementioning

confidence: 99%

“…First are lock codes or passcodes. Lock codes are used to lock the mobile device and require a password, pin or preset action to unlock the phone [10,14,34]. Of these three options a password is the most secure.…”

Section: B Lost or Stolen Devicementioning

confidence: 99%

“…With the growth of the mobile device market there has been a parallel growth in malicious software specifically targeting these devices [10,34]. This is particularly true for Android devices, which comprise approximately 51% of all of the smartphones in the United States [10].…”

Section: Malwarementioning

confidence: 99%

“…Company expenses are further reduced by the fact that companies no longer need to support the devices directly because they are employee owned and instead focus IT support on facilitating a reliable connection between employee devices and company servers. Other benefits that an organization can gain through BYOD deployment typically include employee satisfaction, increased productivity, and improved disaster recovery [5,6,34,35,39].…”

Section: Introductionmentioning

confidence: 99%

See 2 more Smart Citations

Bring Your Own Device: Security technologies

Ketel

Shumate

2015

SoutheastCon 2015

Self Cite

View full text Add to dashboard Cite

Bring Your Own Device (BYOD) is a recent and growing trend. It has emerged in a business environment which allows employees to use their personal devices to access company resources for work. Organizations have started to embrace BYOD in hopes of increasing employee productivity and reducing company technology costs. However, there are many risks associated with this usage, and security is a primary concern. This paper discusses the approaches that organizations can apply to mitigate the risks, which may include policies, diverse technologies, education, and training.

show abstract

Cash in the Academic: Technology Enhanced Learning and the Monetisation of Higher Education

Flavin

2020

Re-Imagining Technology Enhanced Learning

View full text Add to dashboard Cite

Bring Your Own Device: Benefits, risks and control techniques

Cited by 21 publications

References 4 publications

The bring‐your‐own‐device unintended administrator: A perspective from Zimbabwe

The bring‐your‐own‐device unintended administrator: A perspective from Zimbabwe

Bring Your Own Device: Security technologies

Cash in the Academic: Technology Enhanced Learning and the Monetisation of Higher Education

Contact Info

Product

Resources

About