Verizon Business has released its 2024 mobile security index (MSI) report outlining the top threats to mobile and internet of things (IoT) device security. This year’s report, in its seventh iteration, goes beyond employee-level mobile usage and extends into the usage of IoT devices and sensors and the security concerns the growth of these devices can present especially as remote work continues to be a trend. This expanded view of mobile security concerns for organisations showcases the evolving threat landscape that chief information officers (CIOs) and other IT decision makers must contend with.
As dependency on mobile devices grows, so too do the risks, especially in critical infrastructure sectors where the consequences of security breaches can be catastrophic. The 2024 MSI, which surveyed 600 people responsible for security strategy, policy and management, underscores this point.
The survey finds that 80 per cent of respondents consider mobile devices critical to their operations, while 95 per cent are actively using IoT devices. However, this heavy reliance comes with significant security concerns. In critical infrastructure sectors, where 96 per cent of respondents’ report using IoT devices, more than half state that they have experienced severe security incidents that led to data loss or system downtime.
Commenting on the report, Phil Hochmuth, research VP, enterprise mobility, IDC, said, “These findings highlight the continued friction that employers face as more and more work is done on personal mobile devices. This is why we are seeing more and more employers move from a pure bring-your-own-device model to employer provided devices where CIO’s can have greater governance to protect critical infrastructure from cyber-attacks. Organisations should adopt robust frameworks such as Zero Trust and the National Institute of Standards and Technology’s Cybersecurity Framework (NIST CSF) 2.0, and comply with mandates like the European Union’s NIS2 Directive.”
Emerging artificial intelligence (AI) technologies are expected to exacerbate the mobile threat landscape, but it also presents opportunities for defense. A striking 77 per cent of respondents anticipate that AI-assisted attacks, such as deep-fakes and SMS phishing, are likely to succeed. At the same time, 88 per cent of critical infrastructure respondents acknowledge the growing importance of AI-assisted cybersecurity solutions.
With companies increasingly deploying IoT devices, their digital landscapes are evolving, creating a need for cybersecurity strategies to evolve in kind.
Meanwhile, TJ Fox, SVP, Verizon Business, said, “The industrial internet of things (IIoT) is giving rise to a massive expansion in mobile device technology that goes well beyond phones, tablets and laptops. Enterprise networks now include all sorts of sensors and purpose-built devices that monitor, measure, manage and control commercial tasks and data flow. IIoT growth brings with it a proportionate need for more knowledge, awareness and IT solutioning to ensure the security of those increasingly sophisticated networks. The growing importance that IoT plays in our customer’s technology ecosystem underscores why it should be a component in any sound cybersecurity program.”
