Implications of BYOD & the Cloud for Enterprises

7/29/2019 Implications of BYOD & the Cloud for Enterprises

1/14

Clive Longbottom,

Service Director, Quocirca Ltd

Implications of BYOD & the Cloud forEnterprises

Clive Longbottom,

Service Director, Quocirca Ltd


2/14

Quocirca 2013

BYOD

Bring your own device Its not just smartphones, tablets, etc

There is also:

BYOS (software)

Generally through BYOA (App) BYOC (Cloud)

Most everything is held elsewhere

BYOCh (Chaos)

Information everywhere in

unknown states being used byunknown apps

Just what can you do?


3/14

Quocirca 2013

The big issues of BYOD

Wheres the data? How are costs managed?

Theft, loss or other departure of device

Lack of best practicein usage

Lack of team workcapabilities

Lack of organisationaccess to all information

Too many lone wolves


4/14

Quocirca 2013

Strategising BYOD What are your aims?

Secure corporate intellectual property Enable the organisation to compete in

its markets

Enable departments to complete theirprocesses

Enable the workforce to carry out theirtasks

Pretty much everything else is nice tohave

Rule #1

Information must be controlled


5/14

Quocirca 2013

Option 1 Lockdown

Force everyone to use authoriseddevices only

Provide a list of corporate apps

Drive everything through remotedesktops (VDI)

Enforce rules through monitoring,blocking and HR sanctions


6/14

Quocirca 2013

Option 1 Its never worked and never will do

Devices can be expensed

If you stop users from expensing the items, they arecheap enough to self-fund

Unsubstantiated received wisdom is that the newworkforce will just go elsewhere

The virtual desktop is not the ultimate answer

Ever tried saying Nowhen the CEO comes in

and says Make thisbrand new AppliaiPlaymia TransTabwork, will you?


7/14

Quocirca 2013

Option 2 Free for all

If you cant stop them, let them get on with it

Remove device support maybe give them a cashfund for using their own kit

Remove the help desk if you chose that tool/app,

then you support it

Information storage, backup and recovery is theusers problem

Just make it an S.E.P.


8/14

Quocirca 2013

Option 2 Not recommended

Who will the organisation blame when the file sharingsite goes out of business, and all the intellectualproperty suddenly disappears?

What do you do when the business says that they would

have made the right decision if only they had hadaccess to all the information?

How do you deal with leavers?

Oh its your problem, right enough


9/14

Quocirca 2013

Option 3 Lets be sensible

Create a pretty embracing baseplatform definition

And keep it up to date

Aim to allow users to have flexibility

Put yourself in their shoes but

with the business hat on Monitor device connectivity and

activity

What are users using? How? WHY?

Embrace where users are doing thingsintelligently

Gently re-position where users are notbeing clever

Centralise where it makes sense


10/14

Quocirca 2013

Embrace and advise Is that app doing something useful?

Great can we use this across the wholeorganisation?

Is that app helping the organisation?

If no, do we have an equivalent that does?

Is that app dangerous to the organisation?

If so, why and what can be done about it?

Build up a library of useful apps that are useful to theorganisation and add and change as necessary.


11/14

Quocirca 2013

Centralise Its not all about VDI

Although that is a starting point

It is about ensuring that all corporate data is secured

Look at how applications can be streamed

How the power of the device can be utilised

How apps can be accessed and downloaded

Corporate portal needs to be as good as a consumer appstore


12/14

Quocirca 2013

Protect Secure how devices are used for

corporate activities

Encryption

On the move and at rest

VPNs

Gives a central point ofconnection

Data leak prevention

Sandbox functionality

Prevention of cut and paste

Prevention of use of certain appsfor certain types of data


13/14

Quocirca 2013

Management and control Asset management

Identify anything that touches thenetwork

Use multi-factor authentication tomake sure it is who they say they

are Bomb rogue devices

But only the corporate parts

The device if BYOD does not

belong to you


14/14

Quocirca 2013

Conclusion BYOD is here it is not going away

You have to embrace it

Many users will be doing things in a clever way

Identify, praise and use

Many will be doing something clever but not in thebest way

Identify, praise and find a better equivalent

You can only control what you know is happening

Everything corporate has to touch a known point

Dont be scared of BYOD and the Cloud

But dont be laissez faire about it, either

Documents

Implications of BYOD & the Cloud for Enterprises