Sidebar: Security Trumps

Computerworld - Many IT workers have found themselves managing equipment they never bought or authorized. This is happening because employees have been introducing their own wireless devices into organizations, thanks to their low cost and mobile nature -- certainly not the best security situation.
IT departments are getting a better handle on those rogue devices, but experts say IT leaders must keep security in the forefront as they roll out wireless initiatives in 2006. "Without a doubt, the biggest question I get is about security," says Ellen Daley, an analyst at Forrester Research.
Brad C. Johnson, vice president at SystemExperts Corp. in Sudbury, Mass., says wireless security still lags behind security on other systems. Thus, companies need to pay particular attention to the policies and procedures that will keep their data safe.
Johnson says companies should outline who uses wireless for what purposes. They should also ensure end-to-end security with passwords, authentication, authorization and encryption. In addition, companies should work with carriers to allow audits in which they can reconstruct or follow the trail of data.
Companies with their own wireless networks have additional concerns, Johnson says. For example, they need to address what happens when employees put sensitive data on their personal devices via the company's network but then use the devices outside the corporate network. How can that data be protected?
Companies should also step up their antenna management to know how far their own wireless networks extend. Johnson says surveying is key when trying to prevent people from eavesdropping or improperly using the network.