Employees are often using devices in seriously risky ways

Since the start of the pandemic, the modern workforce has become increasingly distributed, while employers have not been able to keep up with the changes in the way employees work. As a result, many high-risk activities and human behaviors continue to occur at the front line. According to a Mobile Mentor study, 36 percent of employees admit to finding ways to work around security policies, and 72 percent value their personal privacy over company security.

The study also proves that password hygiene among employees is risky, onboarding of new employees is inefficient, and shadow IT is out of control.

Why employees need to adhere to security policies

The report examines the endpoint ecosystem as the key to understand how employees perceive privacy, productivity, and personal well-being in the modern workplace. The study defines the endpoint ecosystem as the combination of all the devices, applications and tools plus the employee’s experience using that technology.

“When the endpoint ecosystem works well, you have a secure, productive and happy workforce,” said Denis O’Shea, founder of Mobile Mentor. “It’s always been important, but it became urgent over the last two years when the pandemic forced more people to work remotely, cybersecurity attacks increased, and the Great Resignation forced employers to rethink how they support their employees.”

The study illustrates that the endpoint ecosystem is an employee’s journey from the day they begin their job and includes the onboarding process, all the way to the last day when their accounts are being revoked. Navigating trade-offs between endpoint security and employee experience has always been challenging but it has become critical in this post-pandemic world.

“Until employers prioritize the importance of each component within the endpoint ecosystem, their company security and employee productivity are going to be exposed to serious risk,” O’Shea added.

Other key findings

• Employees have too many passwords and their passwords are a huge liability. Only 31 percent of people use a password management tool. Twenty-nine percent of employees write their work passwords in a personal journal and 69 percent admit to choosing passwords that are easy to remember.
• Shadow IT is out of control. Employees are routinely using unapproved apps for work activities that may contain sensitive data. More than 41 percent of employees say security policies restrict the way they work and 36 percent admit to finding ways to work around security policies. Fifty-three percent of workers believe they are more efficient using non-work apps like Dropbox and Gmail.
• The employee onboarding process is clunky, especially for remote employees. It takes an average of 3 days to get a new employee fully set-up on their devices and requires 3 support calls.
• The use of personal devices is rampant and many employers have not addressed the security risk. Sixty-four percent of employees use a personal device for work but only 43 percent of those devices are securely enabled.

Source: https://www.helpnetsecurity.com/2022/02/22/employees-security-policies/