Portable ICT and BYOD security awareness

Introduction and scope of the awareness module

Aside from the ubiquitous information security risks affecting all kinds of ICT (Information and Communications Technology) systems equally, portable, mobile and wearable ICT devices typically require additional security controls to address the additional risks relating to their portability, flexibility and physical exposure. 

The risks include the obvious (such as physical loss and damage) and not-so-obvious (such as the changes to social structures and power relationships that accompany mobile working, an that are going on around us right now).

BYOD presents yet more risks as a result of both the organization and the employee having a shared interest in the ICT equipment and the data on it.  One issue covered in the awareness materials is the complicated and potentially costly question of intellectual property ownership in a BYOD situation.

And yet, at the same time, the broader business and personal benefits of portable ICT and BYOD are substantial, enough to more than offset at least some of the information security risks.  Knowing which risks to accept and which to mitigate, avoid or pass on, is the trick to staying out of trouble. 

Learning objectives

June’s awareness module was designed with the following broad learning objectives in mind:

• Inform employees (staff and managers) about the information security aspects arising from the use of portable ICT devices including BYOD;
• Explain the breadth of deliberate and accidental information security risks applicable to this domain;
• Promote the associated information security controls.

As always, subscribers are invited to adapt or elaborate on the NoticeBored materials if your learning and awareness objectives differ.

Awareness materials provided in the module

The following unlocked MS Office files are included in the NoticeBored module, divided as always across three parallel streams covering the topic from the differing perspectives of general employees, managers and IT professionals:

Making the most of your NoticeBored subscription

As always, the train-the-trainer guide provided in the module suggests a variety of creative ways to get every once of value from the NoticeBored content.  Aside from checking and disseminating the materials, we’ve suggested some awareness activities going beyond the usual posters, seminars and case studies.

NoticeBored is for you, yes you!

If this brief outline of our latest awareness module intrigues you, why not contact us to evaluate NoticeBored?  We’ll send you a complete module to try.  There’s no commitment and no charge to evaluate the product.  Find out what makes NoticeBored different and discover what led ENISA to describe us as “best practice experts” in security awareness.  Make information security everyone’s business with NoticeBored, the contemporary awareness program.

Copyright © 2013  IsecT Ltd.