Camera phones can pose security risk to enterprises
Computing South Africa -
Businesses are concerned that camera phones can compromise their security and employees' privacy, and many businesses are trying to ban camera phones from their facilities.
However, an outright ban of camera phones is short-sighted and hard to enforce, according to research firm Gartner Inc. By 2006, more than 80% of mobile phones shipped in the US and Western Europe will have cameras. As camera phones account for a larger portion of the overall mobile phone market, companies will need to implement security programs that can be realistically managed.
"Most organizations simply do not have the staff or money to mount effective inspections," says Ken Dulaney, research vice president at Gartner. "Instead, businesses should designate secure zones where restrictions on these devices are tight and can be enforced. For other workplace areas, staff should be given guidelines about what is acceptable."
"Usage guidelines will be far more effective than outright bans, because it is not just the phones' cameras that could pose a security risk," says Carolina Milanesi, Gartenr analyst. "For example, many phones can also record voices. Therefore, it is hard to decide where to draw a firm line about what can and cannot be used at work."
Gartner analysts say there are a flood of high-tech consumer devices, not just camera phones, entering the workplace that could pose a security risk.
"There are Universal Serial Bus 'key ring' drives, some of which will soon feature built-in cameras that can quickly connect to almost any recent PC and take large amounts of information off the premises. There is also a new wave of DVD burners to contend with," Dulaney says. "Any company policy directed at camera phones should be widened to address the transfer of information from enterprise environments to consumer devices in general."
Reprinted with permission from
Computing South Africa
This article was originally published by Computing South Africa. Story copyright 2006 Computing South Africa. All rights reserved.
Additional Resources


White Papers & Webcasts
Sustaining SOX Compliance: Best Practices to Mitigate Risk, Automate Compliance, and Reduce Costs
Since the adoption of SOX, much has been learned about IT compliance. Discover how to make SOX efforts more effective in "Sustaining Sox...
Why Compliance Pays
This OnDemand webcast explores the relationship that firms with best compliance records have higher revenue, greater customer retention, lower financial losses from data...
IDC White Paper: CCM for IT Compliance and Risk Management
Learn from industry analysts how IT organizations are using configuration management to meet compliance requirements and instill best practices. Find out how these...
Best Practices for Managing Business Risks from the Use of IT
(Source: Symantec) Based on exhaustive benchmarks conducted by the IT Policy Compliance, this session highlights the relationship between business risks and use of...
Keep it Clean: Maintaining the Integrity of your CMDB through Change Detection
Learn how configuration drift can challenge configuration management database (CMDB) integrity and how a configuration audit tool and an effective change management process...
Managing And Protecting Your Ever Increasing Mobile Assets
(Source: Absolute Software) Your users are becoming more mobile each day. This is great for productivity - yet challenging for IT control. Natalie...
The Tripwire HIPAA Solution: Meeting the Security Standards Set Forth in Section 164
HIPAA requires businesses that handle personal health information (PHI) to set up strong controls to ensure the security and integrity of that information....
Sun OpenSSO Enterprise Webinar
(Source: Sun) This webinar replay discusses Sun OpenSSO Enterprise innovation--the single, open-source solution that helps your business solve the challenges around internal access...
Configuration Assessment: Choosing the Right Solution
Configuration assessment lets businesses proactively secure their IT infrastructure and achieve compliance with important industry standards and regulations. Learn why configuration assessment is...
Agile Enterprise Content Management (ECM) for Rapid ROI
(Source: IBM) Content rich business processes are a core feature of daily operations at just about any organization today. Very often these essential...
Subscribe to Computerworld
