BYOD – How to Make it More Meaningful

– Kamal Kant Paliwal, Associate Principal (Technology Consulting), Advaiya

Over the past few years, use of personal mobile devices such as smartphones, tablets, notepad and more has become very popular. Furthermore, there is a growing demand from employees for anywhere, anytime access to corporate resources using their personal mobile devices. Thus, there is a fundamental shift in the enterprise computing and mobility model—corporate data and applications on private devices—which is certainly at odds with the traditional IT models of policy based device usage, controlled provisioning, and clear ownership of data, device and applications. With the proliferation of mobile devices with more storage and processing power, the Bring Your Own Device (BYOD) phenomena has certainly become common in many workplaces.

A recent study by Cisco on “BYOD: A Global Perspective” found that 89% of respondent companies are empowering their employees to bring and use their own preferred devices for official work. By implementing BYOD based IT policy, enterprises are able to enhance the experience, improve employee productivity, and reduce the cost of client hardware procurement to some extent. BYOD embraces not only smartphones but there are many types of devices that employees may bring into the organization such as tablets, laptops, storage devices (especially flash drives). Cisco IBSG’s latest survey for the six countries shows that China will be on the top of all the countries by 2016, with 166 million BYOD devices, followed by the United States and India at 108 million and 76 million respectively.

BYOD is being adopted in a big way
In the recent years, the BYOD phenomena is leading to major transformations with significant impact on enterprise processes and IT services. To improve personal productivity, users (in all types of organizations) are bringing their own devices at work and prefer such devices to access corporate applications and data along with using them for personal purposes. As a result, the ratio of devices per person has increased from one to many devices and throughout the day a user is connected to the corporate network with laptops as well as smartphones, tablets, etc.
BYOD affects both employers and employees, so it would be worthwhile to consider the key drivers and challenges from both the perspectives. Making BYOD decisions involves careful scrutiny of multiple aspects that affect both the employers and employees. Some of the key aspects include – for employers - productivity, reducing costs, ensuring confidentiality of data (employers); for employees - free work culture, consistent experiences, flexibility to use their own devices, etc.
In order to support and accept BYOD, enterprises need to make changes in their enterprise IT and culture. They need to develop device-neutral service model, enterprise mobility management platforms and data encryption technology to deliver the BYOD environment with greater security on both IT-owned and employee-owned devices.

Benefits are obvious
As confirmed by various organizations and as per the report from Cisco IBSG 2012, by adopting BYOD, enterprises and users have gained three major benefits— productivity, job satisfaction and cost savings.

Improved productivity: By empowering employees to easily and securely access corporate data on their own device whenever they need, productivity levels will naturally increase.

Job satisfaction: Users have greater flexibility and freedom in terms of device and work- hours and thus, increased job satisfaction.

Cost: With BYOD, enterprises will have huge cost benefits in terms of OPEX and CAPEX including client device acquisition, maintenance, hardware and software licensing (in some scenarios).

Key trends to note
As has been noted in a recent Gartner report: Employees are behaving more like consumers, demanding a wider choice of devices, exploiting consumer devices and applications from app stores, and adopting new strategies such as “bring your own” IT. As a result, the distinctions between a person’s role as an employee and as a consumer are more blurred than ever.
With the consumerization of IT and advanced technologies in the mobile, social and cloud services, some major BYOD trends seen in 2013 based on consumer behavior, to reckon with, are:
•    Rapid growth in remote and mobile workforce and they are demanding access to corporate data and business applications on their personal devices anytime, anywhere
•    One-to-many devices trend has been seen that users are carrying multiple devices (both types and form factors) with them - such as laptop, tablet and smartphone.
•    “Choose Your Own Device” (CYOD) model has emerged where eligible users are given a choice of devices that they can use for official work.
•    UYOD (Use Your Own Device) is a similar concept and can be considered in BYOD. In UYOD, employees are working and accessing corporate resources at home on their devices using VPN, but never bring those devices to the office like remote teleworking.
•    Desktop virtualization or Desktop-as-a-Service (DaaS) approach is getting increasingly popular and better together with BYOD trends.
•    Cloud-based application is another way of allowing corporate data access on personal devices anytime and anywhere. Users just need an internet connection and the compatible browser to access business data on their mobile devices or any device for that matter.
•    There are many organizations which are appreciating BYOD model and providing trainings to employees to make them aware about the BYOD concept, related policies and encouraging them to use mobile devices effectively in a productive manner.
•    Enterprises have started developing multiple mobile device management polices to address the different needs of the geographically dispersed workforce.

There are risks
Diversity in BYOD needs presents the biggest concern “corporate data security“ in front of all the enterprises and IT departments. It massively increases IT responsibilities to address this concern. As per various studies, security is the top concern. But, there are many more concerns that IT must address.
Security: As there is no “one-size-fits-all” policy for securing the corporate data on mobile devices, it becomes the major IT challenge to ensure the security of corporate data and their customer data as well.
Support: Due to the proliferation of smart devices, it is very difficult for IT departments to support multiple devices, platforms, and applications while maintaining the privileged data secure. There is tremendous pressure on IT departments to provide service and support for all the employees’ devices and applications of choice.
Compliance: Another major concern is to address the regulatory compliance needs. Every day a new device is released in the market, so it is a big challenge for IT departments to develop a device agnostic BYOD policy.
Access: To ensure that sensitive data is only accessible to authorized users is again a concern. At the same time, how enterprise IT can terminate the access to corporate information at any time without wiping the personal data in case of an employee exit or in cases where mobile device is lost or stolen, is another big concern.
Device Trust: In case of remote worker (Teleworker), they are accessing corporate data using VPN connection. However, it is difficult to ensure that the home device is trusted to VPN and there is a possibility at home that an unauthorized person can access the sensitive corporate information.
Storage Device: Along with smartphones and tablets, users are carrying their own storage devices (flash drives) to transfer data. Now, this is another IT challenge to ensure that these devices should not break company compliance and leak sensitive data.

If done well, can be a great advantage
BYOD is not going away, whether organizations are ready to embrace it or not. Mobility should not be viewed as a threat, but should be considered as an opportunity that can bring far-reaching improvements in the way organizations function. It is imperative for enterprises to recognize this trend and take proactive steps to embrace BYOD. With BYOD, organizations can allow and encourage the employee-led innovation to find innovative ways of accomplishing official work on user’s preferred platforms and devices.