The Register® — Biting the hand that feeds IT

Feeds

Defence Signals Directorate offers BYOD advice

Motherhood statements for public consumption, detail behind regwall

Regcast training : Hyper-V 3.0, VM high availability and disaster recovery

Australia's signals intelligence agency, the Defence Signals Directorate (DSD), has published two sets of guidelines for Australian government agencies contemplating a bring your own device (BYOD) regime.

The public advice, available here, is utterly anodyne and offers terrifyingly tough questions including:

  • What are the legal implications?
  • What are the financial implications?
  • What are the security implications?
  • Do I have a strong business case to justify the security trade-off?

It also makes the, to IT folks at least, non-startling observation that:

BYOD can be the 'weak link' into a network. Using mobile devices for both personal and business purposes can create more opportunities for social engineering and the inadvertent installation of malicious software. Malicious software can provide an entry route into the associated corporate network and access to information communicated or stored on the device. Organisations are likely to have less visibility and control over the security configuration of, and user behaviour on, BYOD. Employees will often lack the IT knowledge and motivation to reduce security risks to their devices."

The agency has also published a Bring Your Own Device (BYOD) Considerations paper at the OnSecure portal. Membership of that site is only open to government employees and outsiders engaged on government IT projects.

It is to be hoped it offers rather greater detail than the public document's exhortation to “be consultative” when developing BYOD security, as “The most effective scenarios are jointly developed by business and legal representatives, IT security staff, system administrators and employees themselves. This helps ensure your organisation develops policy and processes which all stakeholders are willing to adhere to.” ®

Bootnote

If you've an OnSecure login, we can assure complete discretion if you choose to share the BYOD Considerations document with us.

Cloud based data management

The private advice site is too well secured with a 1024 bit cert with errors!

1
0

network vectors are old school lessons

Theres certain limitations to BYOD security, of course these are never discussed to potential buyers of the idea... Let alone fully or in depth to a layman and even some 'professionals'!

Isolating the infected network node, to prevent disruption to the network as a whole or even just a portion... and even on a low level, is still going to take resources from the network.

And UPNP im sure is employed to mitigate some limitations? Because thats secure too?

1
0

Re: Cor blimey, guv'ner.

If the issues are that obvious maybe someone should pass the article to Matt Assay.

0
0

More from The Register

 breaking news
Number of cops abusing Police National Computer access on the rise
Only a telegram from the Queen can get you off it
 breaking news
NSA whistleblower to tech firms, Obama: 'Grow a pair!'
Ed Snowden: Email tracking grabs 'IPs, raw data, content, headers, attachments, everything'
NSA: We COULD track you by your phone ... if we WANTED to
Honestly, too much work, can't be bothered
Google flings another £1m at online child sex abuse vid CRACKDOWN
See, see, we're trying, ad giant tells Daily Mail UK.gov
 breaking news
NSA PRISM-gate: Relax, GCHQ spooks 'keep us safe', says Cameron
Whatever they are up to, it's all above board, we're told
PRISM snitch claims NSA hacked Chinese targets since 2009
Snowden suddenly looks safer in Hong Kong after revelations
SCO vs. IBM battle resumes over ownership of Unix
Zombie lawsuit back and wants to suck the brains out of Linux
 breaking news
US chief spook: Look, we only want to spy on 6.66 BEELLLION of you
Americans assured they are not in the NSA's sights