back to article Are users undermining your mobile security efforts?

Mobile security is becoming more of a headache as the crossover between business and personal activity continues to increase, and employees generally expect more freedom. Research suggests, however, that you can only push technology-based protection so far before users rebel and try to find ways around it. To manage risks …

  1. P. Lee Silver badge
    Coat

    Mobile management is easy to achieve

    Buy employees a macbook air and a smartphone.

    These are for business, not personal use. Additional software must be cleared by IT Security - you can request new software at http://....

    A list of pre-cleared software and where you may install it from is available at http://....

    If you wish to use your own pc hardware, approved work VM images are available at: http://....

    Now was that so hard?

    1. TheNeonSpirit

      Re: Mobile management is easy to achieve

      And if senior exec X installs a non approved bit of software and tells all his reports to do the same, which turns out to be malware, what then?

      1. James O'Shea

        Re: Mobile management is easy to achieve

        "And if senior exec X installs a non approved bit of software and tells all his reports to do the same, which turns out to be malware, what then?"

        If you don't give him an admin password, he _can't_ install a damn thing, not on a Mac. (Apple takes security semi-seriously. Well, more seriously than Microsoft, anyway...) He _has_ to come to IT to do it. You can then tell him, "No, you can't install that, it's malware." If he demands to do it anyway, make him put it in writing. I have done this. One particular senior VP swore he'd see me fired before the end of the day. Strangely enough, he was outtathere by the end of the week and I am still there.

        I have also done this with Windows systems. Just don't give them an admin password and remove any privs that they don't need. Make it _impossible_ for them to do this... or, if they're willing to commit themselves to taking responsibility for the machine, in writing, give 'em admin privs and let 'em screw themselves. Make sure that the written document states that they're responsible for any problems on the network caused by their idiocy, so that all overtime required to fix the problem gets billed to _their_ cost center number. 'Round here we get time and half for regular OT, double time on weekends, and triple time on holidays. (It's good to be able to force concessions out of HR.) After we drop the OT bill on their desk, they suddenly don't need admin access anymore. Funny, that.

      2. Pliny the Whiner

        Re: Mobile management is easy to achieve

        I think that was adequately answered in the 2008 movie "Tropic Thunder" --

        Les Grossman: What you gotta do is pull down their pants and spank their ass; you spank it!

        Rob Slolom: You spank that ass, Les!

    2. Robert Helpmann?? Silver badge
      Childcatcher

      Re: Mobile management is easy to achieve

      These are for business, not personal use.

      And this is where things go horribly wrong.

  2. nijam

    > Many IT professionals are of the opinion that the world would be a better place without mobile technology.

    IT professionals have *always* been of the opinion that the world would be a better place without ${latest_technology}.

    > Life was so much easier before users.

    FTFY

POST COMMENT House rules

Not a member of The Register? Create a new account here.

  • Enter your comment

  • Add an icon

Anonymous cowards cannot choose their icon

Biting the hand that feeds IT © 1998–2020