Fortinet claims a hardening stance towards BYOD in the workplace

Fortinet has revealed that the growing appetite of Generation Y employees to contravene corporate policies governing use of own devices, personal cloud storage accounts and new technologies such as smart watches, Google Glass and connected cars.

Conducted during the past month, the research showed a 42% increase in the willingness to break usage rules compared to a similar Fortinet survey conducted last year.

The findings also describes the extent to which Generation Y have been victims of cybercrime on their own devices, their ‘threat literacy’ and their widespread practice for storing corporate assets on personal cloud accounts.

Strong Trend of Contravention

Despite respondents’ positivity about their employers’ provisions for BYOD policy, with 45% agreeing this ‘empowers’ them, in total, 51% stated they would contravene any policy in place banning the use of personal devices at work or for work purposes.

This alarming propensity to ignore measures designed to protect employer and employee alike carries through into other areas of personal IT usage.

According to findings, 36% of respondents using their own personal cloud storage (e.g. DropBox) accounts for work purposes said they would break any rules brought in to stop them.

On the subject of emerging technologies such as Google Glass and smart watches almost half (48%) would contravene any policy brought in to curb use of these at work.

Wearable Technology Set to Enter the Workplace

When asked how long it would take for wearable technologies such as smart watches and Google Glass to become widespread at work or for work purposes, 16% said ‘immediately’ and a further 33% when costs come down.

Only 8% of the entire sample disagreed that the technologies would become widespread.

Widespread Use of Personal Cloud Accounts for Sensitive Corporate Data

Forinet claims 89% of the sample has a personal account for at least one cloud storage service with DropBox accounting for 38% of the total sample, while 70% of personal account holders have used their accounts for work purposes.

Of this group, 12% admits to storing work passwords using these accounts, 16% financial information, 22% critical private documents like contracts/business plans, while a third (33%) store customer data.

Almost one third (32%) of the cloud storage users sampled stated they fully trust the cloud for storing their personal data, with only 6% citing aversion through lack of trust.

Threat Literacy Required as Survey Reveals Attacks Really do Happen

When asked about devices ever being compromised and the resulting impact, over 55% of responses indicated an attack on personally owned PCs or laptops, with around half of these impacting on productivity and/or loss of personal and/or corporate data.

Attacks were far less frequent on smartphones (19%), with a slightly higher proportion resulting in loss of data and/or loss of work productivity than on PCs/laptops, despite the sample reporting a higher level of ownership of smartphones than for laptops and PCs.

The same percentage was observed for tablets (19%), but with greater consequences, since 61% of those attacks resulted in significant impact.

Among one of the worrying findings of the research, 14% of respondents said they would not tell an employer if a personal device they used for work purposes became compromised.

BYOD

The survey also hinted at a direct correlation between BYOD usage and threat literacy, i.e. the more frequent the BYOD habit, the better a respondent’s understanding of threats.

This represents a positive finding for organisations when considering if/when to bring policies in alongside training on the risks.

“This year’s research reveals the issues faced by organisations when attempting to enforce policies around BYOD, cloud application usage and soon the adoption of new connected technologies,” says John Maddison, vice president of marketing for Fortinet.

“The study highlights the greater challenge IT managers face when it comes to knowing where corporate data resides and how it is being accessed.

"There is now more than ever a requirement for security intelligence to be implemented at the network level in order to enable control of user activity based on devices, applications being used and locations.”

“It’s worrying to see policy contravention so high and so sharply on the rise, as well as the high instances of Generation Y users being victims of cybercrime.

“On the positive side, however, 88% of the respondents accept that they have an obligation to understand the security risks posed by using their own devices.

"Educating employees on the threat landscape and its possible impact is another key aspect for ensuring an organisation’s IT security.”