This connectivity practice is known by the acronym "bring your own device" (BYOD) in information technology (IT) circles. Lawrence Li, engineering manager for Symantec Hong Kong, says that allowing employees to connect their smartphones and hand devices to company IT systems creates security risks that many companies overlook.
"Devising ways to control the risks of lost data will certainly create more work for IT engineers," says Li.
Hong Kong enjoys one of the highest mobile subscriber bases in the world, with a 197 per cent penetration rate, according to the Office of the Telecommunications Authority. Gartner predicts that mobile phones will overtake personal computers as the most common web access device by 2013. According to government data, about 60 per cent of Hong Kong people currently own smart phones.
Li says that, unlike most company IT systems, smartphones have little in the way of firewall protection. He says office IT departments need to introduce policies on how employees use and store company information on their smartphones, and the procedures if a smartphone is lost or becomes compromised.
Against the risk BYOD poses, benefits include keeping up with the rapid consumerisation of enterprise IT, Li adds. Using BYOD concepts can also attract a younger generation, promote flexibility at work and boost productivity.
To combat the risks posed by using smartphones linked to company IT systems, Symantec has developed data-loss prevention software. "If a personal smartphone or device registered with us is lost, we can remotely wipe any important data," says Li.
With smartphones now accounting for over 50 per cent of new phone purchases, the quantity of malware - or malicious software - targeting smart devices will increase, says Roy Ko, manager for the Hong Kong Computer Emergency Response Team Coordination Centre.
"The consumerisation of IT is leaving companies vulnerable to security threats as IT departments become the unwilling facilitators of the adoption of personal mobile devices in t