How do you decide whether to allow employees that "BYOD" to use Dropbox and other cloud storage services?

pcaulfield

We have a limited BYOD (Bring You Own Device) policy, and are just dipping our toes in the water at this point. One thing a friend who works in a larger company's IT department suggest that we implement immediately is to block cloud storage software services such as Dropbox as a step to prevent data loss. Is this standard procedure for business that allow BYOD, and is it really necessary?

Answer this Question

Answers

3 total
hughye
Vote Up (15)

 

Easy.  I don't allow it.  Services such as Dropbox make it very simple for employees to install sync client software, save files in Dropbox and access the file from various devices, including smartphones and tablets.  The problem, should you care about data loss AT ALL, is that a third party now has a copy of your data.  If you are wondering about why I yelled "at all", think back to June, when Dropbox had a issue that allowed access to files WITHOUT PASSWORDS (sorry to yell again, but it is an important point).  Just prior to that issue, there was an FTC complaint about data security at Dropbox ( http://www.wired.com/threatlevel/2011/05/dropbox-ftc/ ).

 

I'm only using Dropbox as an example because it was mentioned in the original post.  The same concerns exists for me no matter who is the provider.  The only truly safe option is to block cloud storage services if you are concerned about data loss.  This may not be necessary with all companies, because let's face it, not all data is created equal.  You will have to weigh the benefit/risk to determine what is right for your specific business.   

 

jimlynch
Vote Up (13)

I agree with Hughye. It seems to me that the best policy is to not allow it right from the start. Once you do allow it then it becomes harder because you are "taking away" something from the employee that they are used to having. But if the integrity of your data means anything important, I don't see how you can let these services be used by employees.

I think you are asking for trouble if you do and it might come back to bite you eventually.

Vote Up (4)

Cloud storage services are very secure to use in BYOD environment. Over the air services offered by MDM solutions help the employees to safely access the corporate data. DropBox and cloud based services like MDM solutions are thus the best choices that are totally safe and easy to manage.

Ask a question

Join Now or Sign In to ask a question.
Salesforce.com recently celebrated its 15th year in existence, and as the SaaS (software-as-a-service) vendor races toward US$5 billion in revenue its influence on the industry is being felt more than ever. At the same time, some signs indicate that Salesforce.com is having a few growing pains, as well as showing some trappings of the mega-vendors it once mocked with its "End of Software" marketing campaign.
Mainframe operators using BMC software may now be able to enjoy the speedy, devops-style development pace that is quickly becoming the norm for customer-facing mobile applications and Internet services.
Mobile office suite Polaris Office now offers a cloud option for storing your documents. But in all the metrics that matter--price, privacy, and functionality--you'd be better served by passing it by.
Some cloud storage providers who hope to be on the leading edge of cloud security adopt a "zero-knowledge" policy in which vendors say it is impossible for customer data to be snooped on. But a recent study by computer scientists at Johns Hopkins University is questioning just how secure those zero knowledge tactics are.
In today's accessible technology roundup: Google wants to embed cameras in contact lenses, Apple gets a patent for a new GUI for touch devices to improve accessibility and a hacker develops a virtual cane for the blind
Borrowing a page from the recently revised Microsoft playbook, development tools maker Telerik has released as open source the bulk of its Kendo software library of components for building Web and mobile applications
Although Exadata is Oracle's most popular and mature "engineered system," some customers implementing the database machine are making mistakes that prevent them from getting the most performance out of the expensive product, according to a veteran of many Exadata projects.
Sure, you’ve changed a bunch of passwords, but are you doing all you can to protect yourself?
Google did little during its first-quarter earnings report to shush critics who say its Enterprise unit is a second-class citizen in its kingdom.
Red Hat has successfully grown Linux into an enterprise platform, now it's looking to do the same with OpenStack

White Papers & Webcasts

See more White Papers | Webcasts