iPhone Security Survey

Survey conducted by Vanson

Bourne
iPhone SME Security Survey Background
200 major organisations replied to a iPhone security
survey
Commissioned by Devicelock
Conducted by Vanson Bourne

Company Breakdown by Employees

114 Companies had between 250-499 Employees
86 Companies had 500-1000 Employees

Company Breakdown by Industry

43 Companies were from Financial Services
50 Companies were from Manufacturing
46 Companies were from Retail, Distribution or
Transport
61 Other Commerical Concerns
iPhone Security Survey

Questions and Statements

Posed
 Statements Posed to Companies 1
Companies were asked

Which of the following statements applied to your

business?

Available responses were

 We monitor the use of smartphones across the
organisation
 We regard the iPhone to be no less secure as a business
tool than any other smartphone
 The IT Dept supports iPhones
 Employees are banned from using smartphones for
work purposes
 Statements Posed to Companies 2
Companies were asked

What are your biggest concerns around the iPhone as a

business tool?

Available responses were:

 If lost or stolen, unauthorised users could access
company data
 The security threat posed by downloading applications
on to the phone
 Users are able to download company data without the IT
Department knowing
 Other
 Questions Posed to Companies
Companies were asked

Have you taken steps to prevent security threats posed

by iPhones?

If no steps have been taken what reason best explains

why
Phones not widely used in organisation?
Don’t think they are a threat?
No budget?
iPhone Security Survey

Responses
 smartphone Monitoring Response
52% of companies surveyed monitored smartphone usage within their
organisation

The breakdown was as follows;

51% of 43 companies from Financial services
58% of 50 companies from Manufacturing
48% of 46 companies from Retail, Distribution or Transport
51% of 61 companies from other Commercial Businesses

48% of companies surveyed had no idea

whether
data leakage, malware infection, ID theft
was occuring via smartphones within their organisation
 Perspective on iPhone Security
43% of companies surveyed regarded the iPhone to be no less secure
as a business tool than any other smartphone

The breakdown was as follows;

46% of 43 companies from Financial services
42% of 50 companies from Manufacturing
45% of 46 companies from Retail, Distribution or Transport
39% of 61 companies from other Commercial Businesses
 The IT Dept Supports iPhones
29% of companies surveyed had IT departments that supported
iPhones

The breakdown was as follows;

27% of 43 companies from Financial services
24% of 50 companies from Manufacturing
34% of 46 companies from Retail, Distribution or Transport
30% of 61 companies from other Commercial Businesses

71% of companies do not have iPhone support in place.

Not an issue if
iPhones are banned or not used
But what about other smartphones?
What happens when those phones are stolen or lost?
 Smartphones are Banned
14% of companies surveyed had banned all smartphones

The breakdown was as follows;

12% of 43 companies from Financial services
18% of 50 companies from Manufacturing
14% of 46 companies from Retail, Distribution or Transport
13% of 61 companies from other Commercial Businesses

86% of companies allow smartphones usage in their companies.

There are many business efficiencies caused by this,

However
Today’s mobile phones need to be viewed as
Corporate devices that require security considerations
Just like any other compute device.
Biggest Security Concerns Around iPhone
In response to the question regarding he biggest concerns around
th iPhone as a business tool

The breakdown was as follows;

65% of companies were concerned about lost or stolen phones
52% of companies were concerned about downloaded
applications
40% of companies were concerned about data leakage

ID Theft, malware, botnets and data leakage

Have all become major threat vectors
To
Organisational security
From the majority of mobile phones
Have You Taken Steps To Secure iPhone?
Have you taken any steps to secure you business against the security
threat posed by iphones?
36% of companies responded yes
64% of companies responded no

According to the press release:

While 65 per cent of IT decision makers recognised that

unauthorised users could access valuable company data
through the iPhone,
64 per cent said they had not taken any steps to secure
company data against this threat.
Have You Taken Steps To Secure iPhone?

al
rci
me
om
rc
he

t
or
Ot

p
rans
rt

g
o

rin
ion

tu
ut

ac
rib

uf
ist

an
l, d

es
M

vic
tai

0 % 10 % 20 % 30 % 40 % 50 % 60 % 70 % 80 %
er
Re

ls
cia
an
Fin

Retail, distribution or
Financial services Manufacturing Other commercial
transport
No 59 % 59 % 71 % 65 %
Yes 41 % 41 % 29 % 35 %
 Reasons for not Securing iPhone?
The 122 (64%) respondents that answered no to taking steps securing
against the iPhone threat were then given three reasons why they had
not taken steps to secure against the iPhone

77% of companies responded that it was not widely used across the
organisation
16% of companies responded that they didn’t believe it was a threat
7% of companies responded that they didn’t have any budget

Although the survey was designed specifically around iPhones, the fact
is that the majority of mobiles used today contain customer details
and can hold corporate data.

To truly understand this threat see the article

Your Mobile - Our Weapon of Choice
On
www.securityvibes.com/uk
 Summary
 Smartphones are rapidly becoming the norm

 Companies need to think how they will defend against this escalating
threat vector

 Some are adopting the same stance they have with regard to social
networks (ie to ban usage on company premises)

 Those that allow smart phones, need to discuss with the IT and
Security departments the best way forward in terms of
Organisational policy
Technological Defences
User awareness

 If are viewing these slides you still don’t understand the variety of
threat vectors posed by mobile phones then do read the article

Your Mobile – Our Weapon of Choice