Download to read offline
Uploaded byJustin Pirie
The Hidden Security Danger – Don’t Let Email Be Your Downfall
The document discusses the security dangers of using personal email for work-related communications, highlighting that a significant portion of corporate intellectual property is transmitted through email. It notes the increasing trend of employees using personal accounts for work tasks due to frustrations with corporate email systems. The author suggests solutions such as transitioning to cloud services for better storage and continuity, emphasizing the need for organizations to adapt to changing communication preferences.
More Related Content
Similar to The Hidden Security Danger – Don’t Let Email Be Your Downfall
![Email use France report 2017 [adobe]](https://cdn.slidesharecdn.com/ss_thumbnails/emailusefrancereport2017adobe-180629123902-thumbnail.jpg?width=640&height=640&fit=bounds)
More from Justin Pirie
![Getting Started with Apache Spark: Big Data Made Simple [Free Meetup]](https://cdn.slidesharecdn.com/ss_thumbnails/apachesparkgettingstarted-260203175547-8361bcc3-thumbnail.jpg?width=640&height=640&fit=bounds)
The Hidden Security Danger – Don’t Let Email Be Your Downfall
- 1. The Hidden SecurityDanger – Don’t Let Email Be Your Downfall Justin Pirie @justinpirie blog.mimecast.com jpirie@mimecast.com Infosecurity Europe April 19th 2011 nccarf_au
- 2.
- 3.
- 4.
- 5. tipiro Cloud Services forMicrosoft Exchange
- 6.
- 7.
- 8.
- 9. How the problemused to be solved...
- 10.
- 11.
- 12.
- 13.
- 14. Over 900,000 userscan’t be wrong!
- 15. LIVING_BY_THE_MOMENT How did itall start?
- 16. Daniel Mohr Why arethey using personal email?
- 17.
- 18.
- 19. Why Does itMatter? jayhem
- 20. Up to 80%of Corporate IP is in email msmail
- 21. Fancy losing yoursecrets?
- 22. Personal Email: Data Protectionand Sovereignty
- 23.
- 24. Personal Email: PasswordPolicy? Bruno Santos
- 25. dolescum Personal Email: Retentionand Audit?
- 26. Personal Email: LegalRequirements? most uncool
- 27. Personal Email: DataLeak Prevention? just.Luc
- 28.
- 29.
- 30.
- 31. ScottMJones WHY? Consumerisation ofTechnology
- 32. Same time: Personal/ Work Tech Converging Kevan
- 33. Email is dead. FacebookCOO Sheryl Sandberg June 2010
- 34. David Reece Communication isChanging
- 35. Easier AND MoreImportant DailyPic
- 36. What Makes UsProductive At Home: Users Want At Work Anirudh Koul
- 37. Carrick Has Corporate EmailKept Up?
- 38. Email is notdead! Sarcasmo
- 39. 2003: Zuckerburg stillin College Pernell
- 40. Who has asmartphone? John.Karakatsanis
- 41. Who has asmartphone for work? ilamont.com
- 42. What about Workemail on a Smartphone?
- 43. So who usespersonal email for work?
- 44. 85% of Under25’s Use Personal Email for Work Leo Reynolds
- 45. 1 in 5in a regular basis crowt59
- 46. confidence, comely. Research: Onaverage people have 3 email accounts
- 47. 66% Say emailis preferred work communication Leo Reynolds
- 48. bartmaguire 36% of Workemail is Personal
- 49. 79% Send workemails from personal accounts Cameron Maddux
- 50.
- 51. Daniel Mohr Why arethey using personal email?
- 52. mescon Webmail: Storage isunlimited
- 53. Corporate Email: Smalland Limited leonorjr
- 54. 56% Have CorporateMailbox Frustrations _4cryingoutloud
- 55. funkypancake To remain Flexibleand Productive: Workaround
- 56. I don’t thinkwe can ignore this problem dmoola
- 57. IT’s Struggle: Empowermentor Control Rusty Stewart
- 58. Jonno Witts The Perimeteris gone
- 59. "The more youtighten your grip… the more star systems will slip through your fingers.” -- Princess Leia
- 60. Can’t control usersanymore: They must want to use corporate IT J+B=Us
- 61. What can wedo TODAY? margolove
- 62. mescon Offload storage tothe Cloud: Unlimited
- 63. a_sorense Research Agrees: 40%less likely to Workaround
- 64. szeke Uptime: 86% Considerit essential
- 65. Take Continuity tothe Cloud hushed_lavinia
- 66. Thanks! Feel free tocontact me: Justin Pirie @justinpirie blog.mimecast.com jpirie@mimecast.com Infosecurity Europe April 19th 2011 nccarf_au
Editor's Notes
- #2 Hi My name’s Justin Pirie I’m the Cloud Strategist here at Mimecast but I’m best known as an Analyst Blogger in the SaaS and Cloud space.
- #7 Security
- #8 Continutity
- #9 Archive
- #16 How did this all start? Last year we were speaking to some distinguished analysts in the email space and they had a hunch. A hunch that end users were using their personal email to work around corporate email systems.
- #17 He believed this was because of growth of Social Networks and the blurring of Personal and Work technology. But he didn’t know. This is the guy that sets email strategy for most of the Fortune 1000.
- #18 So we wanted to know WHY? Why are users using personal email? Why are they working around their Corporate email systems?
- #19 Enter Generation Gmail. An independent survey and report by Loudhouse research comissioned by Mimecast into the usage of personal email for work.
- #20 Before I deep dive into the report- I just want to set the context: Why does it matter? I don’t think I need to spell out the risks to a room full of infosec professionals, but please humor me!
- #21 Over the years various analysts have estimated there is up to 80% of Corporate IP contained within email. Think of how you transfer files between colleagues. Hands up who sends files through email?
- #22 Think about what that means: Client Details, Corporate Secrets and Infrastructure details. Not stuff you want to be losing.
- #23 But beyond the obvious- Does personal email meet Data Protection and Data Sovereignty requirements?
- #24 What about anti-malware requirements?
- #25 Your Password Policy?
- #26 Corporate retention and audit policies? Does it enable e-discovery?
- #27 Legal requirements?- Corporate information VAT, Company No, Disclaimers etc
- #28 Data Leak Prevention- PCI compliance, end point protection
- #29 Prevent Interception- keyloggers and public access (wifi etc) http://www.flickr.com/photos/hukuzatuna/246057418/sizes/o/in/photostream/
- #30 Of course not! It’s free consumer email. http://www.flickr.com/photos/bstabler/770416963/sizes/z/in/photostream/
- #31 Nightmare! All the years and experience that goes into securing corporate email is going down the toilet!
- #32 Why is this happening? I believe it is part of the broader context- the so called consumerisation of Technology.
- #33 The infiltration of technology in our personal lives is now reversing back into our corporate lives. What’s interesting is that the research highlights that home and work technology overlaps for 65% of people. Certainly mine does. I want one inbox to deal with in my life. I hate SMS and Voicemail because they don’t get delivered to my email inbox.
- #34 Yet at the same time people keep saying Email is dead. How do those facebook notifications get to your inbox I wonder?
- #35 What is happening is a change in how people communicate.
- #36 Communication is simultaneously becoming more important and easier. It started with Text Messaging and Blackberries and is now Facebook and Twitter.
- #37 What makes us productive at home we now want at work.
- #38 But the problem for most corporates is that their email systems haven’t kept up with the rapidly changing pace of communications. Email hasn’t been a priority investment area- it’s dead- remember?
- #39 We keep hearing that email is dead- but research shows that email is still alive and kicking! Nathaniel is so fed up of people saying its dead!
- #40 Over 30 percent of people remain on Exchange 2003, released when Mark Zuckerberg was 19 and still at college! Microsoft are already two versions ahead but people haven’t kept pace. It’s not therefore surprising that users used to using Facebook, Twitter and Gmail rebel against out of date email systems.
- #41 For example- who has a smartphone?
- #42 And who has a smartphone for work?
- #43 Who can receive their work email on a Smartphone?
- #44 Who uses their personal email for work?
- #45 The survey showed 85% of under 25’s use personal email for work
- #46 1 in 5 on a regular basis
- #47 They now know better than ever before- people have on average 3 email accounts including work. 52% of under 25’s think their personal mailbox is better than their corporate mailbox.
- #48 And I’m not alone in that either- 66% of people say that email is their preferred communication vehicle at work.
- #49 Why? It’s because email is the easiest, most non-obtrusive way to manage work and personal communications.
- #50 79% of people send work emails from their personal accounts- 1 in 5 on a regular basis.
- #51 There’s a disconnect here
- #52 The big question was WHY?
- #53 And in terms of storage- people have been trained to think of storage as unlimited. Despite the limitations of traditional email systems.
- #54 Anyone who’s tried to manage mailbox sizes on Exchange 2003 understands that storage isn’t unlimited- at least without a significant cost.
- #55 Not surprising that 56% of people have mailbox frustrations and 39% over the size of their mailboxes.
- #56 Or is it that in order to remain productive and flexible this generation “workaround” security policies? The restrictive policies that IT has put into place for “security” have been foiled by these workaround workers, and they’re potentially damaging the Enterprise.
- #57 I don’t think this is a problem we can ignore any more. SO what’s the solution? I think there are other answers to protect the organisations value.
- #58 But IT aren’t entirely to blame- they’re struggling to find a balance between employee empowerment and control.
- #59 But the problem is that the perimiter is gone. You can’t trust your own network anymore.
- #60 Force Can’t Solve All Problems- "The more you tighten your grip… the more star systems will slip through your fingers.” -- Princess Leia
- #61 We need to enable them to use corporate systems, not because they have to, but because they prefer to.
- #62 What can we do today to extend the corporate email environment to try and give users the empowerment they want while retaining control for the enterprise?
- #63 Offloading historical mailbox storage into the cloud- a cloud archive is an excellent way to simultaneously get control over mailbox sizes on premise while enabling users to have unlimited storage.
- #64 And the research backs it up- 40% of people would be less likely to workaround corporate systems if they had an unlimited mailbox. A significant security uplift.
- #65 Let’s not forget about uptime either. 86% consider it essential that email is problem free.
- #66 Cloud Continuity- DR/BC much cheaper and easier in the Cloud