fatigue when it comes to using their mobile devices, which leaves their data exposed to personal and corporate identity theft if these devices were to fall into the wrong hands. That's according to a survey released today by endpoint data protection specialists CREDANT Technologies, who conducted the "mobile usage survey" amongst 227 IT professionals with the majority drawn from companies that employ more than 1,000 people.

Thirty five percent revealed they just don't get around to using a password on their business phones and smartphones, even though they know they should as they contain sensitive and confidential information! Surprisingly, IT professionals are only marginally better at using passwords than the general population, as a survey conducted earlier in the year by CREDANT found that 40% of all users don't bother with passwords on their mobile phones.

The sorts of information that IT professionals are storing on their smartphones and mobiles, many of which are totally unprotected with a password, include:

1. 80% Business names and addresses
2. 66% Personal names and addresses
3. 23% Business emails
4. 16% Personal emails
5. 12% Bank account details
6. 12% Business diary with details of all their appointments and meetings
7. 7% Personal diary
8. 5% Credit card information
9. 4% Photos
10. 1% Passwords and Pin numbers

Andrew Kahl, Sr. VP of Operations & Co-Founder from CREDANT Technologies explains "It is alarming to note that the very people who are responsible for IT security are not much better at protecting the information on their business phones than most of their co-workers, who don't necessarily know any better. If a mobile or smartphone goes missing and isn't protected with a password, and contains business names and addresses and other corporate data such as business emails, then the company is immediately in breach of the data protection act by failing to meet some of its principals on electronic data."

"Of even greater concern is the damage that can be done to a company, and the individual who is responsible for the phone, if it falls into the wrong hands, which could expose them to personal or corporate identity theft. It is therefore imperative that all mobile phone users who hold sensitive data, either personal or corporate, should always password protect it at a minimum - and encrypt it if the data is really sensitive," added Kahl.

According to the IT professionals surveyed, the worst culprits at addressing mobile security within their companies are typically the sales teams, followed by the board of directors and senior management. HR comes out as the best at keeping their mobiles aligned to the corporate mobile security policy.

The survey also found that a third of IT professionals use their own personal mobile phone for work purposes even though the company specifically bans them for business use with almost a fifth spending more than an hour or more per day on their own personal phone for business purposes.

About the Survey

The "mobile usage survey" of IT professionals was carried out amongst 227 IT professionals at Infosecurity Europe 2009.

About CREDANT Technologies

CREDANT Technologies is a market leader in endpoint data protection solutions. CREDANT's data security solutions mitigate risk, preserve customer brand, and reduce the cost of compliance, enabling business to "protect what matters." CREDANT Mobile Guardian is a centrally managed endpoint data protection solution providing strong authentication, intelligent encryption, usage controls, and key management for data recovery. By aligning security to the type of user, device, and location, CREDANT permits the audit and enforcement of security policies across all computing endpoints. Strategic partners and customers include leaders in finance, government, healthcare, manufacturing, retail, technology, and services. Austin Ventures, Menlo Ventures, Crescendo Ventures, Intel Capital and Cisco Systems are investors in CREDANT Technologies.

Information Source:    Credant

Image courtesy of Credant