Mixing Work and Personal Devices: the Unseen Risks
Table of Contents
One of the enduring legacies of the COVID-19 pandemic is the widespread practice of hybrid and remote work. Many professionals can now submit work to a variety of clients via the internet. This can be liberating, but it can also introduce security risks, especially if the professional in question isn’t using their device for just one purpose.
Why Combining Work and Personal Use Increases Security Exposure
When you’re using a device solely for work, you might use only a very limited selection of applications. A writer, for example, might use a simple app to create Markdown-formatted text, and another to browse the internet.
If you’re also using a computer for personal reasons, then these applications might be joined by a variety of others, including games, chat applications, and other hobby-related programs.
The more applications you’re using, the greater the available surface for attacks. When just one application is compromised, it can create a pathway toward other parts of the system. In so-called ‘Bring Your Own Device’ setups, a single careless employee with a compromised laptop can act as a Trojan Horse, introducing malware into a wider network.
The Scale of BYOD Adoption and Its Hidden Corporate Risks
What might give us additional cause for alarm is the sheer scale of BYOD adoption. Around 95% of organizations now permit their workers to bring their own devices into the office. It’s fair to say that only a minority of these organizations have security procedures that we might consider water-tight. In many cases, data is put at risk, not by the systems and devices themselves, but by an inconsistent approach to security hygiene.
Data Leakage & Secure Browsing: Critical Concerns for Modern Workflows
What if you need to access a work-related email or cloud server using a personal device? Doing so might present an opportunity for phishing, man-in-the-middle attacks, and data exposure.
There are a few ways to mitigate the risk, here. Among the best of these is the use of the right browser extensions. A good VPN Chrome extension might provide an encrypted connection to a workplace, effective even when you’re logging on via a compromised network.
The Impact of Blurred Device Boundaries on Organizational Security
We shouldn’t just worry about the distinction between work and personal use. It’s also worth differentiating between different kinds of personal use. You might take additional precautions when you’re shopping via unsecured Wi-Fi, for example – and you might be more cautious still when you’re logging onto your banking application.
By keeping device boundaries stark and clear, you can limit the risk. Even if you don’t want to invest in many different laptops, you can protect yourself through the use of dual-boot, and virtual machines.