Report: Handheld security could cost more than the device

Salt Lake City, UT, April 19, 2005 -- (MobileVillage) -- The cost to enterprises for handheld device security could be greater than the cost of the devices themselves, according to IT research firm Burton Group.

In the Burton Group research report, "Handheld Device Security," analyst Eric Maiwald calculated that the list prices for a complete set of security products (antivirus, VPN, device security, and management) can be higher than the cost of the device itself. However, Maiwald questions whether all uses of handheld devices a complete set of products.

"Organizations should perform a risk assessment of any handheld device installation to determine the types of security mechanisms that should be installed on devices and whether the cost is justified by the risk to the organization," says Maiwald. "In some cases, products overlap so that one product may suffice. For example, it may be sufficient for an organization to use a management product to manage the authentication on the device."

According to the report, all of the antivirus vendors and most of the management vendors sell products for both desktop systems and handheld devices.

Burton Group's recommendations:

Match communication capabilities to intended use. Handheld devices have a number of communication options, not all of which may be necessary. A device that is used to take orders in a distribution company may not need WLAN or WWAN connectivity if the orders will be synchronized when the employee returns to the organization's facilities, and will therefore not require a device firewall.

Extend existing products wherever possible. Most large organizations have management systems and security mechanisms such as VPNs, antivirus solutions and file encryption products in place. If these products are able to manage and protect handheld devices, they should be extended by the organization instead of purchasing new products specifically for the devices.

Alternatively, rather than managing devices in house, an organization can work with a network operator that provides device management as a service. In most cases, this option is only open to organizations that choose devices with WWAN capability. As these devices become more prevalent, network operators are likely to offer greater services in terms of asset tracking, software management, and configuration control.

Fill gaps after comparing risk and cost. Management products may provide sufficient protection for lost or stolen devices to make the use of security products unnecessary. However device security products generally provide richer authentication and file encryption functionality than do management products, so the organization should determine the risk associated with the compromise of sensitive information on the device.

For a copy of the report, see the Burton Group web site.

Recent Related Stories:

Gartner Mobile & Wireless Summit: Uncertainty reigns. Plan accordingly (Network World)

SonicWALL adds wireless firewall

Trend Micro updates its mobile security app

Back to MobileVillage News Page