Question

• A security domain is a related group of IT objects protected by a common security policy Generally, these IT objects are controlled by one access control mechanism. Many applications span security domains. Is this a good idea? How is this important to other audit issues like cloud, bring your own device (BYOD), etc. Pick a BYOD device and comment on at least two vulnerabilities for that device if a company allows its use as a personal device as well. What controls would you want to implement on the BYOD?

Answer 1

BYOD(BRING YOUR OWN DEVICE):

BYOD is widely confined to IT sector,which refers to the employees who bring their own device to do the work.

BYOD COMPUTING DEVICES:

1.smartphone

2.laptop

3.tablet etc,..

IS THIS A GOOD IDEA?

As every coin has Head and Tail,this BYOD has pros and cons.but,many of them are cons.

PROS:

1.it increases best practices of work.

2.increase productivity

3.it allows employees to familiar with technology can help recruiting happy workers.

4.Cost saving:buying electronics by company.

5.worker satisfaction

CONS:

1.Security risks:leakage of data

2.privacy issues:less control over appliation used and they might be malware on apps

3.Burden to IT staff:one shouls familiar with many devicces and OS

4.Damage:if the personal device got stuck or damage,the entire work may stop(Device Infection).

5.Cloud:there might be problem providing security to the data.

6.Lack of management:there might be loss of control and cannot be managed properly.

CONTROLS YOU WANT TO IMPLEMENT ON THE BYOD:

1.KNOW COMPLEATELY ABOUT BYOD

• one should know compleately about the byod and implementation shouls be on proper diagnosis.

2.CREATE YOUR OWN POLICY

• one should create their own company policy to restrict risks

3.RESTRICTION FOR SOME DEVICES

• one should restrict some devices which may be damaged or hang in between the work

4.SEPERATE COMPANY AND PERSONAL DATA

• the company shouls seperate its personal data ,not to be hacked or robbed.

5.PROTECTION OF EMPLOYEE DATA

• the company should protect the emmployee data,to provide safety and security to them

6.FOLLOW SOME SECURITY POLOCIES AND GUIDLINES

• one should follow some policies and instructions.and make employees to confined to it.