Even if you don’t issue your staff with smart phones, and you prohibit them from storing sensitive data on them, they’re still very likely to use them to exchange emails and to talk about about business matters.
This short post from CSO Online – ShmooCon 2011: Your Android’s dirty little secret – is a useful reminder that everyone needs to be wary of 3rd party applications for smart phones, and also to be generally aware that smart phones are really just hand-held computers and thus subject to most of the security threats that PCs are exposed to. And it’s not limited to Android-based phones – iPhones and Blackberries are also vulnerable.
Whether or not you officially support smart phone use by your staff, smart phone security is a topic that you really must include in your security awareness training.
