Why Big Australia is gaga for BYO Computing

 
Page 1 of 2 | Single page

Analysis: Telstra, Jetstar and Norton Rose discuss their BYO Projects.

Telstra has joined a growing list of large Australian companies considering allowing their employees to bring their own computing devices into the workplace, in an attempt to extract savings and efficiencies from various business units.

Telstra chief information officer Patrick Eltridge told iTnews that the telco is conducting proof-of-concept trials across several areas of its business.

The trials also involve the use of desktop virtualisation and the development of new interfaces for staff accessing corporate applications via mobile devices such as smartphones and tablet PCs.

 

Remember to sign up to our CIO Strategies bulletin for the strategic thinking to help CIOs and IT managers plan, evaluate and execute IT initiatives.

 

Large organisations are under creeping pressure to make systems nimbler and more user-friendly, and increasingly are yielding to staff demands to bring to work their own smartphones, tablet computers, laptops, and sometimes even 3G dongles and Wi-Fi routers.

Whilst the BYO Computing trend was in the past framed as an inevitable problem created by the ‘consumerisation of IT’, many of Australia’s top CIOs now view it as a means of attracting better staff and even reducing costs.

BYO Computing schemes have proven attractive to bean-counters realising savings by allowing staff to salary-sacrifice IT equipment.

Legal firm Norton Rose, for example, “fully supports” the connection of personal mobile devices to its information systems and is weighing up a future in which staff also bring in laptops and other PCs.

“A lot of new technologies are being released and we clearly see major business benefits in having access to office systems while outside the office and travelling overseas,” said Phil Scorgie, director of business information systems at Norton Rose.

“This is particularly important to support our growing international practice. It enables our lawyers to work anywhere in the world as virtual lawyers.”

Jetstar CIO and head of IT Stephen Tame said the airline had not yet formulated an official policy, but employee-owned iPhones, iPads and MacBooks were allowed to co-exist on the network.

“I foresee a time in the not-too-distant future when mobile phones, laptops and PC equipment will be a personal choice and a self-managed device,” Tame said.

Jetstar deploys virtualisation to cater for staff-owned machines, shipping set-up and updates on SD cards to remote workers.

“Deployed on virtual machines, corporate IT still has control over the systems accessing the corporate environment,” he said.

KPMG director of innovation Bruce McCabe said many of the firm’s clients were experimenting with BYO Computing. Many saw the practice as inevitable, he said.

“It’s now firmly in the consciousness of IT leaders in Australia, much more than a year ago, but in terms of implementation - only a few have scratched the surface,” McCabe said.

Any cost benefits associated with not issuing company machines would be offset by equipment allowances, increased IT security expenditure and testing, he said.

“Long-term, the support costs should be less expensive as we move to self-service.”

Security concerns

The number one roadblock to BYO Computing tends to be security concerns.

The premise of a miscellaneous fleet of devices operating in the high-rise offices of corporate Australia does not impress security analysts.

Gartner analyst Laurence Orans expects BYO programs to increase the threat of botnets.

Orans estimates that between four and eight percent of enterprise PCs already have an active botnet client installed and argues that consumer-owned PCs will bring even more Trojans into work.

“The threat of higher botnet compromise rates on consumer PCs is very real and security teams will need to invest in additional resources to mitigate these threats,” Orans said in a security paper.

Uri Rivner, head of new technologies and identity protection at security vendor RSA noted in a February research paper that 88 percent of Fortune 500 companies already had Zeus-infected employee PCs.

Orans forecasts that 80 percent of enterprises adopting BYO computing would see their compromise rates increase by 100 percent or more by 2013.

Read on for a checklist of management policies to consider for your BYO computing deployment.... we also talk to some IT managers that don't like the idea...

Copyright © iTnews.com.au . All rights reserved.


Why Big Australia is gaga for BYO Computing
"This is BYO computing, not issued corporate devices. BYO computing is entirely about the convenience to use your own personal device, not corporate device. This is not a new concept, it’s been ..."
By Mark D
 
 
 
Comments: 11
BaysNet
May 10, 2011 9:58 AM
Whether IT like it or not this is coming to a business near you. IT security specialists can at least prepare the way for BYO and it is certainly possible to securely allow BYO devices access to the company network if the network is designed and managed properly.
davmel
May 10, 2011 4:15 PM
BaysNet, how do you "properly" design and manage a network to stop an employee device from copying all company data under the command of a trojan payload on the employee device (that has evaded viral scan signatures) and then uploading that data to a hacker once back outside the corporate network?
How do you stop trojan software from totally corrupting or deleting data inside the network?
How do you stop rogue employees from copying data onto their own device and providing it to a competitor before or after they resign?

The only way to truly secure a business network is to lock it down electronically with firewalls and prevent physical access (even with employee owned hardware).
realitybites
May 10, 2011 5:16 PM
I agree with davemel, this is madness!

Also what about all the personal customer information that these companies hold? Seeing this announced just after the "Sony Incident" it makes me wonder if these companies consider this information valuable enough to protect. I hope the legal firm mentioned has good lawyers because if they go ahead and things go pear shaped, they deserve the book thrown at them.
scooter
May 10, 2011 5:28 PM
There are any number of sandboxed virtual environments that can allow access with the appropriate restrictions. Many of them are government approved, not directly by Oz but because of overseas approvals. Not being a salesman or receiving a cut I won't name names but they are out there.
I, for one, believe that this will greatly simplify the admin role. Enforce specific standards before allowing connection, use the virtualised environment and it doesn't matter what is resident on the machine, it is locked out of the sandbox. Works for me.
realitybites
May 10, 2011 5:42 PM
If a virtual machine is connected to the corporate network and has internet access it is no different to a physical machine. Don't think because it's virtual you don't have to worry so much about security.

PS: Lets not forget the only reason mentioned for this way of thinking is to save a few bucks!

Edited by realitybites: 10/5/2011 05:59:00 PM
brunks
May 11, 2011 3:17 PM
I agree with BaysNet, whether you want to accept this approach or not it is already happening not just here but globally and it will continue to grow. Instead of the traditional security response ("no") why not accept this and look to how it can be enabled securely? Why not make security a business enabler rather than a roadblock?

As has already been mentioned by Scooter, the use of virtual machines, either local or hosted, to provide a corporate sandbox on any machine is probably the easiest approach currently.

If the virtual machine (not the guest) is properly managed and has the appropriate security controls then it will be as secure (if not more so) than a physical corporate device - and it is easier to manage and doesn't suffer the same obsolesence issues.
realitybites
May 11, 2011 4:48 PM
Well everyone is entitled to their opinion, but I would simply point out that not one of you that supports this "trend" has offered any credible counters for the points raised by davmel.

"If the virtual machine (not the guest)" this still has me scratching my head.

[EDIT] Left out "of"

Edited by realitybites: 11/5/2011 04:49:52 PM
jkv
May 11, 2011 5:04 PM
"How do you stop rogue employees from copying data onto their own device and providing it to a competitor before or after they resign?"
You stop them by using Endpoint Protection that doesn't allow them to download or upload data from/to their devices - there is a number of endpoint protection and security software solutions that enable a company to do this.
"How do you stop trojan software from totally corrupting or deleting data inside the network?" Again endpoint protection and security solutions can force the device to accept AV software if none is found present on the device.
realitybites
May 11, 2011 5:42 PM
Thanks jkv, see guy's that wasn't so hard was it?

However I still remain (for the moment) unconvinced. :)
marcusg
May 13, 2011 3:06 PM
Security is paramount, yes, but what about support, repair and maintenance? Will IT provide a basic PC / smartphone / laptop / tablet for those folks with broken gadgets? Or will it be up to the employee to finance that part of the exercise too? If it comes in, I'm asking for an immediate salary review.
Mark D
May 16, 2011 1:43 PM
This is BYO computing, not issued corporate devices. BYO computing is entirely about the convenience to use your own personal device, not corporate device. This is not a new concept, it’s been around since the early days of terminal servers and the issues are still the same. The moment you start enforcing policies onto an employee's personal home device you effectively take it from them and asset it as corporate property. You implement complex device passwords to mitigate the risk of someone losing the device or leaving it unlocked at the airport. You lock down apps & install security applications to mitigate the risk of data being compromised/lost. However let’s be honest here, your staff wont react well to their device being locked down. Virtualisation has not changed a thing.

While what jkv says holds true in the current corporate computing environment, the "idea" of BYO computing has been and will remain fundamentally flawed.

Edited by Mark D: 16/5/2011 01:54:53 PM
Comments have been disabled for this article.
 
 
 
Top Stories
Australian miners send drones to work
In-depth: Unmanned aerial vehicles in the resources sector.
 
The New Zealand telco problem
Opinion: Could Telstra save Kiwi telcos?
 
IT price probe to 'name and shame' gougers
Industry ducking the issue, committee claims.
 
Sign up to receive iTnews email bulletins
   FOLLOW US...

Latest VideosSee all videos »

Latest Comments
Polls
Should the Government enact new legislation to protect copyright holders in the digital age?

   |   View results
Yes
  19%
 
No
  81%
TOTAL VOTES: 510

Vote