Mobile device risks: what they mean for enterprise access controls

TL;DR: Mobile phones and tablets now widen the enterprise trust boundary through phishing, OS flaws, overprivileged apps, malware, risky connections and theft, according to Lookout, which frames mobile devices as a direct path to organisational access and data exposure. Mobile security has become an access-governance problem, not just an endpoint hygiene problem.

Editorial analysis by NHI Mgmt Group, based on content published by Lookout: “The Silent Killers: 7 Examples of Mobile Device Security Risks”.

By the numbers:

• 96% of security leaders are confident their employees can spot a phishing attempt.

Key questions

Q: What should security teams do first when mobile devices are part of the access path?

A: Start by identifying which mobile workflows can reach email, cloud apps and sensitive data, then apply stronger device trust, authentication and revocation controls to those paths first.

Q: Why do mobile devices increase the risk of account compromise?

A: Mobile devices increase account compromise risk because phishing, app permissions, local data and physical loss can all expose the same credentials or session material.

Q: What breaks when a phone or tablet is used with overprivileged apps?

A: When apps receive more access than they need, they create extra places where data, tokens or user context can be exposed.

Practitioner guidance

• Harden mobile authentication paths Reduce reliance on codes that can be intercepted over SMS or social engineering, and strengthen device-bound authentication and session controls for mobile users.
• Audit app permissions and remove surplus access Review which mobile apps can reach location, photos, files and messages, then remove privileges that are not required for the app's business purpose.
• Treat public networks as hostile by default Assume airport Wi-Fi, café hotspots and paired devices can be manipulated, and require encryption and conditional access before sensitive data or credentials move across them.

Bottom line: Mobile devices expand the enterprise trust boundary because phishing, overprivileged apps, insecure networks and theft can all become access problems.

Explore further

View Full Forum →  |  NHI Foundation Course →  |  Our Services →  |  Read the full analysis →