What is happening with our data Imation Mobile

What is happening with our data? Imation Mobile Security Research Presentation August 2013

How are Australian companies managing data? 2

Approach and methodology

Sample § Senior IT decision makers § I am the sole decision maker for IT § I have a major influence in decisions regarding IT § Business size § No small-small business § Business size classification § 25 to 245 ─ medium § 250 to 2, 499 staff ─ large § more than 2, 500 staff ─ enterprise § All states and territories § 207 interviews § Compared to 500 (combined) interviews from USA, Canada, Germany and UK 4

Key findings

Remote working § Many Australians work remotely § 77% of companies have between 1% to 30% who work remotely § 71% of overseas companies have between 1% and 30% who work remotely § Only 23% of Australian companies have more than 30% who work remotely § 27% of overseas companies have more than 30% who work remotely § Australia is similar to overseas 6

Mobile device policy in 2012 § Policy enforcement § 63% of companies have a mobile policy that is enforced § 26% have a mobile policy that is not enforced § 11% do not have a mobile policy at all § Australia falls behind the rest of the world – 77% have a mobile policy that is enforced § But we’re better than Germany where only 53% have a mobile policy that enforced § How is the policy enforced? § 77% have devices that are company approved § 21% only have devices owned by the company § Overseas are more strict and less flexible with 38% only allowing company approved devices § More potential for BYOD in Australia 7

What about a policy in 2013 and the future? § A mobile policy § 4% have a policy in place in 2013 § 43% don’t have a policy but plan to in the next year § 52% do not plan to implement in a policy in the next year § Business size § The larger the business the more likely they are to have implemented a plan since 2012. One quarter (25%) of enterprise businesses have implemented a plan since 2012. § Overseas § 8% have a policy in place in 2013 § 56% plan to have a policy in the next year § 43% don’t have a policy nor plan to Base: those that did not have a policy in 2012’ 8

What is allowed on the network? Allowed, Company Issued Overseas Allowed, Company Issued Diff AU OS Allowed, Employee Owned Overseas Allowed, Employee Owned Diff AU OS Not Allowed or not used Laptops 75 89 -14 24 39 -15 1 Smart phones 52 82 -30 43 51 -8 5 Tablets 48 74 -26 44 43 1 8 USB flash drives 47 69 -22 44 38 6 9 Memory cards 42 64 -22 41 35 6 17 External hard drives 48 62 -14 31 29 2 21 Optical media 39 59 -20 35 28 7 26 Other 16 24 -8 21 11 10 62 9

Confidence that data is protected from loss or theft Top 2 ‘extremely confident’ and ‘very confident’ 10

Confidence that data is protected from loss or theft Top 2 ‘extremely confident’ and ‘very confident’ 11

Consequences of a data breach 12

Biggest corporate concern about loss of data? % Negative impact on the company's reputation 60 Potential exposure of the company's proprietary information to a competitor 54 Monetary costs associated with data loss and associated breach notification 57 Increased internal workload required to clean up the problem 45 Other 3 13

USBs in your draw/desk right now How many USBs are in your draw or on your desk right now? How well do you know what is on each USB? % % 0 20 Extremely 35 1 to 5 67 Very 36 6 to 10 7 Moderately 20 More than 10 6 Slightly 7 Not at all 2 14

Neil Stollznow PO Box 16 Level 2/156 Military Rd Neutral Bay NSW 2089 T +61 2 9953 7543 F +61 2 9953 7563 M +61 412 200 235 neil@stollznow. com. au www. stollznow. com. au