Mobile device security considerations for small- and medium-sized enterprise business mobility

Abstract

Purpose – This paper's purpose is to identify and accentuate the dilemma faced by small- to medium-sized enterprises (SMEs) who use mobile devices as part of their mobility business strategy. While large enterprises have the resources to implement emerging security recommendations for mobile devices, such as smartphones and tablets, SMEs often lack the IT resources and capabilities needed. The SME mobile device business dilemma is to invest in more expensive maximum security technologies, invest in less expensive minimum security technologies with increased risk, or postpone the business mobility strategy in order to protect enterprise and customer data and information. This paper investigates mobile device security and the implications of security recommendations for SMEs. Design/methodology/approach – This conceptual paper reviews mobile device security research, identifies increased security risks, and recommends security practices for SMEs. Findings – This paper identifies emerging mobile device security risks and provides a set of minimum mobile device security recommendations practical for SMEs. However, SMEs would still have increased security risks versus large enterprises who can implement maximum mobile device security recommendations. SMEs are faced with a dilemma: embrace the mobility business strategy and adopt and invest in the necessary security technology, implement minimum precautions with increased risk, or give up their mobility business strategy. Practical implications – This paper develops a practical list of minimum mobile device security recommendations for SMEs. It also increases the awareness of potential security risks for SMEs from mobile devices. Originality/value – This paper expands previous research investigating SME adoption of computers, broadband internet-based services, and Wi-Fi by adding mobile devices. It describes the SME competitive advantages from adopting mobile devices for enterprise business mobility, while accentuating the increased business risks and implications for SMEs.

On the efficacy of smartphone security: A critical analysis of modifications in business students’ practices over time

“…The pervasiveness of mobile technology creates new threats to the security of organizational data (Harris & Patten, 2014;Ogren, 2008) and has blurred the line between using company-issued devices and personal devices in order to complete work tasks. The ready availability of personal devices often leads to increased employee productivity, albeit at the sacrifice of security.…”

“…Mobile technology includes phones, tablets, personal digital assistants (PDAs), gaming consoles, and e-readers (Harris & Patten, 2014). At 7.22 billion, the number of mobile devices exceeds the number of people in the world, which is approximately 7.19 billion (Boren, 2014).…”

Comparing the Mobile Device Security Behavior of College Students and Information Technology Professionals

“…This list is adapted from Harris and Patten (2014), where a more detailed list of security practices was created for small businesses. These security practices apply regardless of whether the device is for personal or business use, but become particularly relevant in the BYOD context where employees are utilizing devices that the organization does not directly manage or control.…”

Authentication schemes for smart mobile devices: threat models, countermeasures, and open research issues

“…Their research focused uap ubp 3 4 5 6 7 8 2 9 10 11 12 13 14 1 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 3 4 5 6 7 8 2 9 10 11 12 13 14 1 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 3 4 5 6 7 8 2 9 10 11 12 13 14 1 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 They concluded that security and privacy issues need more attention while developing mobile phone sensing systems and applications, since as mobile phones are used for social interactions, users' private data are vulnerable. Harris et al [16] in their survey tried to identify all emerging security risks that mobile device imposes on SMEs and provided a set of minimum security recommendations that can be applied to mobile devices by the SMEs. Based on a fundamental dilemma, whether to move to the mobile era, which results in facing higher risks and investing on costly security technologies, or postpone the business mobility strategy in order to protect enterprise and customer data and information.…”