One Article Review
| Source |  NoticeBored |
|---|---|
| Identifiant | 451400 |
| Date de publication | 2017-12-18 15:32:02 (vue: 2017-12-18 15:32:02) |
| Titre | NBlog December 18 - the complexities of simplification |
| Texte |  From a worker's perspective, BYOD is 'simply' about being allowed to work on his/her own ICT devices, rather than having to use those owned and provided by the organization. What difference would that make? It's straightforward, isn't it?Good questions! There are numerous differences in fact, some of which have substantial implications for information risk, security and privacy. For example, ownership and control of the device is distinct from ownership and control of the data: so what happens when a worker leaves the organization (resigns or is 'let go'), taking their devices with them? Aside from any corporate data on the devices, they had been permitted access to the corporate network, systems, apps and data. The corporate IT support professionals had been managing the devices, and probably had access to any personal data on them. Lines are blurred.In a similar vein, IoT is more than just allowing assorted things to be accessed through the Internet and/or corporate networks. Securing things is distinctly challenging when the devices are diverse, often inaccessible and have limited storage, processing and other capabilities ... but if they are delivering business- or safety-critical functions, the associated risks may be serious.The complexities beneath the surface make this a challenging topic for security awareness: we need to help workers (general staff, managers and specialists, remember) appreciate and address the underlying issues, without totally confusing them with techno-babble. That means simplifying things just enough but no more, a delicate balancing act.In reality, dividing the awareness audience into those three groups lets us adjust the focus, nature and depth of the materials accordingly. Managers, for instance, have a particular interest in the risk management, compliance and governance aspects that are of little concern to workers in general. At the same time, the awareness materials should generate opportunities for the three audience groups to interact, which means finding common ground and shared interests, points for discussion. That's what we're working on now. |
| Envoyé | Oui |
| Condensat | at about access accessed accordingly act address adjust allowed allowing and/or any appreciate apps are aside aspects associated assorted audience awareness awareness: babble balancing been being beneath blurred business but byod capabilities challenging common complexities compliance concern confusing control corporate critical data data: december delicate delivering depth device devices difference differences discussion distinct distinctly diverse dividing enough example fact finding focus from functions general generate good governance ground groups had happens have having help his/her ict implications inaccessible information instance interact interest interests internet iot isn issues just leaves let lets limited lines little make management managers managing materials may means more nature nblog need network networks now numerous often opportunities organization other own owned ownership particular permitted personal perspective points privacy probably processing professionals provided questions rather reality remember resigns risk risks safety same securing security serious shared should similar simplification simplifying simply some specialists staff storage straightforward substantial support surface systems taking techno than that them things those three through time topic totally underlying use vein what when which without work worker workers working would |
| Tags | |
| Stories | |
| Notes | |
| Move | 
|
L'article ne semble pas avoir été repris aprés sa publication.
L'article ne semble pas avoir été repris sur un précédent.