Asia's Source for Enterprise Network Knowledge

Sunday, February 26th, 2017

Security

IT departments are facing obstacles to increased user mobility in their organization

Organizations are challenged to meet demands for greater mobility as 92% of IT departments worldwide still restrict users from accessing sensitive corporate data and resources from mobile devices, according to a new global survey.

Despite almost all organizations (98%) having users who require mobile or remote access, 95% of IT departments are facing obstacles to increased user mobility in their organization, the primary being security concerns. 

The 2015 Global Authentication and Identity Access Management Index reveals that almost all respondents (94%) are concerned that their organization will be breached or hacked as a result of credential theft or compromise. This is exacerbated by the rise in mobile endpoints within organizations, as most organizations reported to have, on average, two mobile end points per user and managing three sets of credentials per user.

Additionally, on average, one out of every five (20%) IT support tickets are resulting from lost or forgotten usernames and passwords. 

In an effort to overcome the security challenges around mobility, the majority of IT departments (86%) plan to implement two-factor authentication for access to cloud applications. Currently, 38% of users utilize two-factor authentication, this is expected to rise to over half (51%) of users using it in two years.

Over half (57%) already use two-factor authentication to secure external users' access to resources, indicating the varied use of the technology. Almost all (92%) respondents currently have at least one application protected by two-factor authentication, with cloud applications, web portals and VPNs among the top three apps protected. 

As IT continues to look to two-factor authentication to deal with the credentials crunch, the vast majority (91%) of respondents are seeking to do this by using cloud-based authentication-as-a-service and managing their organization's two-factor authentication centrally.

By having the ability to implement uniform policies that address security threats in a consistent way, two-factor authentication can at the same time streamline access to numerous applications. In addition, cloud efficiencies are a critical factor in being able to deploy two-factor authentication across multiple use cases and implement solutions quickly and efficiently. Indeed, 90% of respondents view cloud delivery as a key consideration in the purchasing process of a strong authentication solution.   

"The pressure is on for IT departments to accommodate demands for greater mobility as employees crave new and flexible approaches to working," said François Lasnier, Senior Vice President for Identity Protection at Gemalto. "Organizations that are not open to this change are very likely to be inhibiting business productivity.” 

"Users are likely to do what it takes to get the job done, with or without permission, so when corporate resources are scattered across different sites, the need for strong authentication and as-a-service delivery will serve vital functions in making this happen securely. In doing so, organizations will be better placed to protect the identities of their users, without sacrificing on productivity or data protection." 

"The growing use of cloud applications and mobile devices within organizations, combined with rising threats, and the need to reduce costs, require entirely new considerations for access control. Clearly there is an immediate need for authentication and access management solutions that can help organizations solve these challenges," concluded Lasnier. 

"Organizations recognize the need to scale security to protect as many on-premises and cloud applications as possible, especially when sourcing a two-factor authentication solution," said Garrett Bekker, Senior Security Analyst at 451 Research. "The survey findings suggest that the choice of two-factor authentication will depend on the solution's ability to provide centralized management, as well as secure access to the widest range of applications."