Endpoint Security Management Essay

While IoT devices holds much promise, there are still many security issues that need to be addressed. These security issues can have a significant impact on everyday life, such as causing damage, disruption to business operations, and in some cases even loss of life. Having all your devices interconnected using IoT such as lighting, thermostats, doors, and elevators, seems convenient but in fact this poses a great security risk. If these risks are exploited it could disrupt power or lighting which could lead to a loss of life if it were something like a hospital. Addressing these security risks will lead to more efficient and safer to use IoT devices but companies will have to identify them in their devices first (Tankard, 2015).

The purpose of this study will be to develop adequate security strategies and best practices as a guide to add to the knowledge base of current literature on IoT devices. The current research literature on the internet of things indicates that the number of attacks against IoT devices are on the rise. The number of potential attackers is growing at an alarming rate because of the number of IoT devices that are joined to network every day (Abomhara and Kien, 2015). Tools are available to those same potential attackers are much more sophisticated that they have ever been. (p. 66). This study will provide valuable information to IT leaders, service providers, vendors and IoT manufactures.

Bring Your Own Device (BYOD) is when an employee uses one or more personal computing devices for business purposes. It can include personal computers, laptops, tablets, USB or flash drives, mobile phones and even online computing services such as Dropbox or Google Drive. The history of BYOD stems from the technological advances of the past 25 years, starting with employees accessing corporate networks from their home computers via dial-up modems in the late 1980’s and virtual private networks starting in the early 1990’s, continuing through the massive increase in mobile phones and access to corporate email via Blackberry type devices and culminating in the current state of being connected all the time via tablets

How do you secure something that is changing faster than you can fix it? The Internet has had security problems since its earliest days as a pure research project. Today, after several years and orders of magnitude of growth, is still has security problems. It is being used for a purpose for which it was never intended: commerce. It is somewhat ironic that the early Internet was design as a prototype for a high-availability command and control network that could resist outages resulting from enemy actions, yet it cannot resist college undergraduates. The problem is that the attackers are on, and make up apart of, the network they are attacking. Designing a system that is capable of resisting attack from within,

In the age of technology, it is important now more than ever to have the appropriate solutions to protect companies from malicious threats and data loss. Endpoint protection is a solution devised to incorporate antivirus, firewall, application control, and detection/prevention capabilities. Having an endpoint protection platform will ensure that a company receives full-spectrum security without the complexity of multiple applications and vendors.

Best defined, a bring-your-own device (BYOD) system is a network that is specifically designed for individuals to connect their own devices for use within the system (source). For example, X-Rocket may allow certain employees the luxury of using their own laptop or tablet computer for work-related purposes, rather than using a company device. While there are many advantages to utilizing a BYOD system, such as low-costs and flexibility, advanced security methods are required to ensure safe networking and data access. Current BYOD security issues include unknown third-party access, data tracking challenges, data leakage, and non-compliance with networking safety procedures (source). Notably, the Cobb County school district of Marietta, Georgia,

Human factors influence polices in the BYOD practice in the workplace because for the most part employees are comfortable and prefer using their own devices compared to company issued devices as they can often multitask between personal and business access. The use of mobile devices comes with the consequences of the device being stolen, lost and exposed to threats. The possibility of these devices falling in the wrong hands or stranger not authorized access to data could result to harmful software application being uploaded or downloaded which could infect the device and compromise the network.

It is always interesting to attend a CISO roundtable. Cybersecurity discussions provide the opportunity to learn, experience thought-provoking scenarios and share our problems and triumphs. I recently attended a roundtable that focuses on security automation and orchestration. When the question of the difference between the two was posed, no one could provide a concrete answer. The best answer that anyone could offer was that "orchestration" is just a fancier synonym for "automation." Both terms are currently being used quite a bit and almost interchangeably, but they are not synonyms.

Speaking of life’s experiences, there was one night on Security 8 that became something that would haunt me the rest of my life. Security 8 was an entry control point to the Elephant Cage area. The Elephant Cage measured about 850 feet wide by 100 feet high and contained a circular arrangement of antennas. The antennas could locate signals thousands of miles away with an accuracy of three degrees or better. The 6922 Electronic Security Squadron operated the elephant cage, which was used to gather intelligence during the Cold War. Just in case you wondered, there were no elephants housed there while I was at Clark.

Bring Your Own Device (BYOD) is referred to it by many names: bring your own danger, bring your own disaster, bring your own detonator, but whatever the name, it is becoming more and more commonplace in all sectors across the world. What used to be unthinkable, using one’s own personal mobile device or smartphone for work is now emerging as one of the biggest technology trends of this decade. The idea of using a personal device at work developed when many executives got their first Blackberries and iPhones back in the mid-2000’s and wanted access to corporate resources from these devices such as email and the corporate intranet. Since then, BYOD has transitioned from a trend to a major revolution of enterprise Information Technology (IT)

Let’s look at this survey where 4,000 employees in a verity of industries across 16 countries were surveyed and half of them use their mobile devices for work. CIO’s and IT departments want to embrace the BYOD model to help accomplish their company’s mission but they want to do it securely. At this point the secret is out BYOD is a real issue and IT departments need to strategize now for an effective enterprise mobility management solution. It’s time to ignore the standard approved device list, locking down corporate apps, and enforcing mobile device policy. The risk of a CIO or IT department failing to implement a suitable solution for their mobile device network is very real. It’s time to explore new ideas to effectively manage a mobile device network via the Enterprise Mobility platform. The invasion of mobile device’s into the workplace is going to happen weather industry leaders want them to or not, and smarter companies are looking to deploy Enterprise Mobility strategies before they are overrun.

Internet of Things is a new technology that delivers communication among billions of smart devices via the Internet such as a smart car, vending machine, smart house, health system and business system, et cetera. Nearly 50 billion devices and sensors will be connected to the Internet by 2020 and most of them will perform their duties without having security. In addition, the critical missions of a massive interconnected device are security and interoperability. Hackers will use more complex tools and techniques to breach the network system. Hence, companies should establish strong security countermeasures and the best approach to provide better security by deploying a multilayer approach which is called Defense in Depth. Defense in Depth

Over the past few years the number of mobile devices owned per person has grown, and will continue to grow, exponentially. With more and more people using a variety of different devices that suit their usability and productivity needs, businesses are trying to figure out how to adapt and remain competitive. The Bring Your Own Device, or BYOD, phenomenon has crept up on many major business, and they are now finding out the hard way that security and integration procedures cannot be overlooked. The solutions for this issue are still in their infancy, but the two most prominent include Mobile Device Management (MDM) and Mobile Application Management (MAM). Although these are considered Band-Aids for a larger issue, businesses, at this time, must adopt one of these two methods in order to provide adequate security for existing and new business information systems, while maintaining convenience and personalization for their employees.

It’s no secret that IoT, BYOD and mobile access have made these endpoints one of the most concerning network security gaps. As these devices continue to saturate the market, organizations are struggling to balance the productivity gains these devices deliver, against the security risks. There is no place where this risk is more pronounced than in organizations that are part of a nation’s critical infrastructure.

The most important elements of the Medical Center case are the fact that endpoint security becomes a challenging process. The challenges can are distinguished by comprehending the end point. The end point is a strategic method that the company uses to protect/secure their data networking system from being compromised or accessed by those not entitled this private information. When implementing a method for the appropriate end point, one must consider the device the software is being added too. For example, desktops and laptops are easier to add the software, but all smartphones are not compatible unless the phone has features like a Blackberry. The feature that the Blackberry offers that other smartphones do not is that their data can be connected to the business Virtual Private Network Systems. The VPN system employs encrypt data information to avoid others from viewing the content. It requires the users to have a password/pin to access this pertinent data information. Although, if the permits outside devices such as cellular devices to use this still poses a threat to the company. The threat is due to the device not having the proper protection such as the software or the VPN in place. In the business sector security/protection is a challenge due to the extensive interaction and the usage of different networking systems that can is compromised when put into the wrong hands.