A new survey on mobile security by Good Technology reveals that e-mail and the corporate intranet are the top two security concerns slowing the widespread adoption of enterprise handheld computing using PDAs like the Blackberry or Trio.
The Good Technology (a provider of industry standards-based enterprise handheld computing software and service) survey included the voluntary participation of nearly 600 U.S.-based IT professionals and executives representing companies of 150 to 16,000 employees.
Findings include:
· 79% of respondents consider email to be the greatest source
· 26% of respondents regard as the greatest vulnerability
· 48% of respondents stated that firewall vulnerability (open firewall holes to allow inbound wireless device traffic, risk of denial of service attacks, or other unauthorized intrusion) concerns them most
· 30% of respondents are not likely at all to deploy a wireless solution that requires opening firewall ports, making perimeter security a top priority when selecting a mobile email solution
· Top wireless security concern: selected handheld security (protecting data on the handheld if it is lost, stolen or misplaced) cited by 29% of individuals surveyed
"The enterprise mobile email and handheld computing markets have grown exponentially over the past five years. But this growth has created a corresponding surge in security vulnerability over the same time period," said Rick Osterloh, vice president, Product Management and Marketing, Good Technology. "This survey reveals important concerns and underscores the requirement for comprehensive mobile security. (Good Technology has) has united device and security management, and are enabling IT to establish an automated system for compliance—all in a single, integrated solution."
Handheld Compliance On-device data encryption remains top of mind for IT administrators.
· 59% will not deploy a solution that does not encrypt data on the device.
· 65% of individuals surveyed stated that wireless enforcement of virus protection, along with the ability to update virus files over the air, are very important handheld security features
Remote control of password policy is considered a very important handheld security requirement by 55% of respondents; only 18% are comfortable with simple user name and password authentication, traditionally used as a primary layer of protection.
In addition, 57% of respondents believe that the ability to wirelessly specify applications that must be present on the device to be very important, demonstrating the increasing importance of handheld compliance with broader corporate security policy.
Proliferation of Handhelds Drives Need for Automated Security and Device Management
While the ability to detect and control applications on handhelds remains a top concern, the study concluded the majority of enterprises do not have standard operating procedure to address this issue; 70% of respondents do not have an automated mechanism to determine which applications mobile users have on their devices. Only half 53% are currently able to enforce security and password policies consistently and effectively on devices without end-user dependency.



