8 Strategies For Improving Corporate Cell Phone Security

Today’s corporate cell phone users are accustomed to an enormous amount of functionality from their hand held wireless devices. A wide variety of features, coupled with broadband connectivity, allows for quick and easy access to email, file transfers, internet browsing, etc. – from almost any location.

As the functionality of wireless devices continues to grow, so do the security risks of keeping stored and transferred data safe and secure. The following are a variety of safeguards that are essential for help in improving corporate cell phone security.

1) Utilize Built-in Security Features

For years, desktop computers have provided users with “built-in” security measures. Most hand held devices now include a number of configuration settings and security measures that are intended to thwart basic security attacks. Oftentimes, however, these features simply go unused.

User authentication mechanisms generally available on most handheld devices are PINs and passwords. Some of these mechanisms include a timeout feature that locks the device automatically after reaching an “inactivity” threshold. Employees should be familiar with and take full advantage of the security features that are “built-in” to their own personal communication devices.

2) Maintain Physical Control

A key issue that many organizations struggle with is deciding on whether to allow for employee-owned devices or stick with organization-issued equipment. From a security perspective, organization-issued devices are easier to control and manage. Not only can security controls be managed from a central location, but the devices themselves can also be configured to comply with corporate security policies.

Organization members should be encouraged to treat all wireless devices much like they would a credit card. A lost or stolen wireless device incurs not only the cost of the handset itself, but it also puts the sensitive data contained on it at risk.

Lending cell phones to friends and relatives should be strictly forbidden as a matter of corporate policy. Allowing access to wireless devices by individuals outside the organization opens the door for misuse, abuse and/or fraud.

3) Limit Data Exposure

Keeping ultra-sensitive financial and personal information on company-owned wireless devices should be avoided if at all possible. Although it may be convenient to keep PINs, passwords, account numbers and user IDs for quick access to online accounts, maintaining this sort of information on a wireless device should be avoided. It is best to store this information on a separate memory card until needed.

If the presence of this type of sensitive data cannot be avoided, always encrypt the information. There are many commercially available encryption applications for most of today’s current hand held devices. (NOTE: The need for encrypting data is another good reason for centralized control of wireless devices within an organization.)

4) Backup Data Frequently

Everyone knows that keeping important digital data in only one spot is a recipe for disaster. Never trust a mobile device to be the only repository for important information. Be sure to back up its data frequently to a desktop computer or stand alone hard drive. Backing up data onto a memory card is effective if the card is kept separate from the device itself.

5) Avoid Malware, Suspicious Apps and Software Downloads

Malicious programs can be spread to mobile devices through communications channels such as multimedia messages or Bluetooth connections. It is best to instruct users to treat any messages received from an unknown number with suspicion. Most malware requires a user to interact with the message to become active on the device. For example, malware that is propagated via a Bluetooth connection cannot install itself without user approval.

All organizations should have a policy in place that prohibits wireless users from downloading software from internet sites. Software installation should be centrally controlled within the organization at all times. Just as desktop PCs have safeguards to prevent employees from downloading and installing software, so do wireless devices. Some devices have application security features that prevent the installation of third-party software unless it is digitally signed.

6) Add Prevention and Detection Software

Malicious programs and unauthorized downloads cannot always be avoided. Therefore, it is best that each organization arm their wireless devices with prevention and detection software that will help curb malicious attacks of this nature. A wide range of products now exist in the marketplace for this purpose. These products simply expand the security that is already built into each device.

The most typical security features of prevention and detection software include: user authentication alternatives, firewalls, virus detection, spam controls, memory and contents erasure, encryption, intrusion detection, VPN, and others.

7) Deactivate Compromised Devices

If a wireless device is lost or stolen, disabling service, locking it, or completely erasing its contents can be achieved remotely. Always be sure to contact the wireless carrier in the event of a lost or stolen device. To help avoid excessive charges from the wireless carrier in the event of a stolen phone, it is adviseable to obtain a police report that outlines the nature of the incident.

Some handheld units such as the Blackberry, have the ability to lock or erase its contents remotely through a built-in mechanism. This action is triggered typically through the receipt of a message containing a pre-registered activation code. A company policy should be established that informs users of procedures for handling and reporting lost or stolen organization-owned devices.

Establish a Written Wireless Security Policy

All organizations should provide users with a written wireless security policy. This policy defines the rules, principles, and practices for which the organization treats all of its wireless resources. The policy should outline stated restrictions for personal use of the devices, such as limits on storage of personal information like music, photos, contacts, etc.

In short, the wireless security policy should reflect the organization’s views on security and its intent on keeping organizational data safe and secure. The success of such a policy lies on its quality, implementation and enforcement. A weak policy that is never enforced is not much better than no policy at all. Consult a qualified telecom consultant for help in constructing an effective wireless policy.

Author: Karen Thatcher
Article Source: EzineArticles.com
Provided by: Programmable Multi-cooker

• VoIP - What Is It and Why Do I Need It? In the dynamically changing world of technology, VoIP (Voice Over Internet Protocol) is one of the latest and potentially greatest wonders ever created by the human mind. Watch a techie show, read a techie magazine or talk to any cyber dude and most will acknowledge that VoIP is one......
• IP Telephone PBX System An IP PBX telephone system in your business premises is an ideal option which will facilitate communication with your business associates and customers, irrespective of the location. This is a highly scalable solution for any business enterprise to manage calls within the business network, at lower rates.Benefits of IP......
• Enterprise Application Integration The Enterprise Application Integration (EAI) is defined as the process of integrating enterprise computer applications using computer software resources, mostly organizations have two type of applications front office and back office applications, to integrate them in such a way that they can communicate with each other when needed either......
• How to Implement Emergency Response In a Small Business Using Call Management The telephone is the most vital communication tool and the lifeline of most organizations. Valuable time is often lost in trying to locate the individual that placed an emergency call. Seconds can make the difference in saving lives or apprehending harassing callers. In this era of heightened security concerns,......
• How To Set Up A Business VoIP System To set up a business VoIP system, you need several components. A central device to manage the calls, the way a private branch exchange (PBX) or key system unit (KSU) does in traditional phone systems is one of them. This can be a dedicated piece of hardware such as an......

• Types of Coin Collecting Software Collecting different coins is a truly pleasurable and profitable type of hobby or endeavor. Most people who are novices in collecting encounter problems relating to having too many coins, and therefore they do not have an adequate amount of information about the coins that they have or about the coins......
• Wireless Outdoor Security Cameras Choosing The Best When hearing or reading about security cameras, most people automatically think of the indoor kind.  However, these days many home owners and businesses also have a wireless outdoor security camera installed on their premises.  There are many reasons for this.  For one thing, it allows owners to see what’s going......
• Smartphone review: HTC Hero In the wonderful world of smartphones, there are some devices that really stand out. The HTC Hero has been a long-awaited smartphone for gadget enthusiasts and since July 2009 that is launched on market, smartphone fans have found numerous reasons to agree that this device was missing from the Android......
• Wireless Networking Cards-A Closer Look Ok, so you've read all the cool stuff and heard all the great things about going wireless and then it just hit you. However, that works you don't know or care but it hit you. That was it, the little voice in your head said, "do it" and that was...
• How much will you fight for in the checkout line? This article on Smart Spending tells about how Donna Freedman got an extra $3 off of five backpacks at Office Depot that were already on sale.  Here it was a question of what the coupons were actually good for -- Is it good on sale items? On more than one......

Related posts:

1. Reverse Cell Phone Lookups – Trace Cell Phone Numbers of Nuisance Callers Easy and Fast
2. Limited Budget For SIEM? Then Opt For Managed Security Service Providers (MSSP)
3. Business Security Signal VOIP Wireless
4. Business Security Signal VOIP Wireless
5. Twelve Key Questions You Need to Ask About Your Computer Security for Your Home or Business