Connect with us
Anglostratits

Business

Beware the Bring Your Own Device (BYOD) blind spot: Personal devices are a complicated weak link

Published

4 months ago

on

KnowBe4

Up to 84% of organisations globally practise bring your own device (BYOD) in some form, but only half of them officially allow it, according to a recent report (https://apo-opa.co/498rnlG). While the convenience and cost saving of employees’ using their own personal devices for work is undeniable, there are many security risks involved too, particularly in hybrid and remote work environments, asserts Anna Collard from KnowBe4 Africa (www.KnowBe4.com).

It’s becoming increasingly common for organisations to expect employees to use their own personal devices for work, such as smartphones, tablets and laptops, and employees seem to prefer the level of freedom it gives them (https://apo-opa.co/3JfJ8Vx). From an organisational perspective, they stand to save an average of R5 000 per employee every year (https://apo-opa.co/47cbQPa) if their employees use just their own mobile devices, with two-thirds reporting that it boosts their productivity (https://apo-opa.co/47wWjL7).

In South Africa, this trend has also become ubiquitous. “BYOD, particularly with smartphones having access to corporate email accounts, has become the norm for a lot of South African organisations for many years already,” asserts Anna Collard, SVP Content Strategy and Evangelist at KnowBe4 Africa.

“While organisations in the financial services sector will have stricter policies, many start-ups, SMEs and even some larger organisations often allow, or even expect, employees to use their own phones and laptops, sometimes without formal policies in place.”

While flexible and convenient, she believes this informal approach introduces significant cyber and compliance risks. The new KnowBe4 Africa Human Risk Management Report 2025 (https://apo-opa.co/3WzbdKR) highlights that up to 80% of employees in Africa use personal devices for work, with broader studies finding 70% of these devices are unmanaged – a critical blind spot for many organisations.

BYOD blind spots

The most notable cybersecurity risk associated with BYOD is data leakage. “Personal devices can easily leak sensitive data through unsecured apps, cloud storage or public Wi-Fi,” she explains. “Without proper controls, even a misplaced phone can become a breach vector (https://apo-opa.co/3Wzbeyp).”

Another security blind spot is employees downloading malicious apps. “Employees may unknowingly install apps that contain malware,” Collard comments. “Some apps mimic legitimate ones (https://apo-opa.co/48zCF2b), but secretly harvest data or open backdoors into corporate systems.” This also extends to “shadow IT” – the use of unapproved applications or services – which can proliferate via personal devices, creating unmonitored entry points for attackers.

Organisations must have a clear, communicated BYOD policy – what’s allowed, what’s not and what minimum protection is expected

A further risk is outdated software. “Personal devices may run outdated operating systems or apps, making them vulnerable to known exploits,” she says. “IT teams often lack visibility to patch non-managed devices, and a large percentage of people have ‘an update is ready to be installed on your device’-notifications that have been hanging around for ages; unactioned.”

In addition, many employees may have a false sense of security about their phone or laptop, especially since almost half of Gen Z respondents (48%) take cybersecurity protection on their personal devices more seriously than on their work devices, according to an Ernst & Young survey in the US (https://apo-opa.co/48FeM9o). “Just because it’s my device doesn’t mean it’s secure for sensitive work data,” stresses Collard. “A weak BYOD policy opens the door to data leaks, shadow IT and insider risk.”

What organisations should do

In order to mitigate these risks, organisations need to come up with a robust BYOD policy. “It starts with policy and awareness (https://apo-opa.co/4ooJBnf),” she states. “Organisations must have a clear, communicated BYOD policy – what’s allowed, what’s not and what minimum protection is expected.”

Some useful technical controls include employees having strong passwords, multifactor authentication (MFA), encryption, endpoint security and patching. Organisations can also segment their networks to isolate personal devices from critical corporate assets. “Mobile Device Management (MDM) tools can enforce some controls,” concedes Collard, “but they can’t replace human vigilance.”

She is a firm advocate of security awareness training to heighten awareness of cybersecurity risks, especially among younger employees who are more likely to use the same passwords for their personal and professional accounts (https://apo-opa.co/48FeM9o). “Organisations need to educate employees on the specific risks of BYOD, beyond  ‘don’t click links’,” she says. This is crucial, as 96% of organisations believe (https://apo-opa.co/48FeM9o) their employees might fall for more attacks in the future due to AI use by bad actors. The KnowBe4 Africa Human Risk Management Report 2025 (https://apo-opa.co/3WzbdKR) further highlights that AI policy remains a governance blind spot in many organisations, with 46% still developing formal AI policies – making employee education on AI-related BYOD risks even more critical.

“Organisations can simulate attacks (https://apo-opa.co/4oy3AQO) that leverage BYOD vulnerabilities, such as phishing specific to mobile apps, while fostering a culture where employees feel comfortable reporting potential incidents on personal devices without fear of reprisal.”

Alongside security training, Collard is an advocate of digital mindfulness, which she describes as an important  weapon against cybersecurity threats. “Being digitally mindful helps employees slow down, become aware of risky moments and question suspicious behaviour, especially on personal devices,” she says.

Managing the human element

Even though privately-owned devices may appear to be the problem, managing the human element is absolutely key in mitigating BYOD security risks. “A device is just a tool; what matters is how we use it,” Collard emphasises. “You can have the most secure set-up, but if someone is rushed, tired or emotionally triggered, they’re more likely to click on a malicious link or fall for a scam.”

She is adamant that organisations need to train their employees’ attention and awareness to build resilience, not just rely on tools. “Ultimately, it’s a combination of the right technology and human vigilance,” she concludes.

Distributed by APO Group on behalf of KnowBe4.

Home  Facebook

Related Topics:
Continue Reading
Advertisement

Events

As global power structures shift, Invest Africa convenes The Africa Debate 2026 to redefine partnership in a changing world

Published

2 days ago

on

February 6, 2026

By

Debate

The Africa Debate 2026 will provide a platform for this essential, era-defining discussion, convening leaders to explore how Africa and its partners can build more balanced, resilient and sustainable models of cooperation

LONDON, United Kingdom, February 5, 2026/APO Group/ –As African economies assert greater agency in a rapidly evolving global order, Invest Africa (www.InvestAfrica.com) is delighted to announce The Africa Debate 2026, its flagship investment forum, taking place at the historic Guildhall in London on 3 June 2026.

Now in its 12th year, The Africa Debate has established itself as London’s premier platform for African investment dialogue since launching in 2014, convening over 800 global decision-makers annually to shape the future of trade, finance, investment, and development across the continent.

Under the theme “Redefining Partnership: Navigating a World in Transition”, this year’s forum will focus on Africa’s response to global economic realignment with greater agency, ambition and economic sovereignty.

The Africa Debate puts Africa’s priorities at the centre of the conversation, moving beyond traditional narratives to focus on ownership, resilience and long-term value creation.

“Volatility is not new to Africa. What is changing is the opportunity to respond with greater agency and ambition,” says Invest Africa CEO Chantelé Carrington.

“This year’s edition of The Africa Debate asks how we strengthen economic sovereignty — from access to capital and investment to financial and industrial policy — so African economies can take greater ownership of their growth. Success will be defined by how effectively we turn disruption into leverage and partnership into shared value.”

The Africa Debate 2026 will provide a platform for this essential, era-defining discussion, convening leaders to explore how Africa and its partners can build more balanced, resilient and sustainable models of cooperation.

Key challenges driving the debate

Core focus areas for this year’s edition of The Africa Debate include:

This year’s edition of The Africa Debate asks how we strengthen economic sovereignty — from access to capital and investment to financial and industrial policy

Global Realignment & New Partnerships

How shifting geopolitical and economic power structures are reshaping Africa’s global partnerships, trade dynamics and investment landscape.

Financing Africa’s Future

The growing need to reform the global financial architecture, new approaches to development finance, as well as the strengthening of market access and financial resilience of African economies in a changing global system.

Strategic Value Chains

Moving beyond primary exports to build local value chains in critical minerals for the green economy. Also addressing Africa’s energy access gap and mobilising investment in renewable and transitional energy systems.

Digital Transformation & Technology

Unlocking growth in fintech, AI and digital infrastructure to drive productivity, inclusion, and the next phase of Africa’s economic transformation.

The Africa Debate 2026 offers a unique platform for high-level dialogue, deal-making, and strategic engagement. Attendees will gain actionable insights from leading policymakers, investors and business leaders shaping Africa’s economic future, while building strategic partnerships that define the continent’s next growth phase.

Registration is now open (http://apo-opa.co/46b19gj).

Distributed by APO Group on behalf of Invest Africa.

Continue Reading

Business

Zion Adeoye terminated as Chief Executive Officer (CEO) of CLG due to serious personal and professional conduct violations

Published

2 days ago

on

February 6, 2026

By

CLG

After a thorough internal and external investigation, along with a disciplinary hearing chaired by Sbongiseni Dube, CLG (https://CLGglobal.com) has made the decision to terminate Zion Adeoye due to serious personal and professional conduct violations. This process adhered to the Code of Good Practice of the Labour Relations Act, ensuring fairness, transparency, and compliance with South African law.

Mr. Adeoye has been held accountable for several serious offenses, including:

  • Making malicious and defamatory statements against colleagues
  • Extortion
  • Intimidation
  • Fraud
  • Misuse of company funds
  • Theft and misappropriation of funds
  • Breach of fiduciary duty
  • Mismanagement

His actions are in direct contradiction to our firm’s core values. We do not approve of attorneys spending time in a Gentleman’s Club. CLG deeply regrets the impact this situation has had on our colleagues and continues to provide full support to those affected.

We want to express our gratitude to those who spoke up and to reassure everyone at the firm of our unwavering commitment to maintaining a respectful workplace. Misconduct of any kind is unacceptable and will be addressed decisively.

We recognize the seriousness of this matter and have referred it to the appropriate law enforcement, regulatory, and legal authorities in Nigeria, Mauritius, and South Africa. We kindly ask that the privacy of the third party involved be respected.

Distributed by APO Group on behalf of CLG.

 

Continue Reading

Business

The International Islamic Trade Finance Corporation (ITFC) Strengthens Partnership with the Republic of Djibouti through US$35 Million Financing Facility

Published

2 days ago

on

February 6, 2026

By

ITFC

This facility forms part of the US$600 million, three-year Framework Agreement signed in May 2023 between ITFC and the Republic of Djibouti, reflecting the strong and growing partnership between both parties

JEDDAH, Saudi Arabia, February 5, 2026/APO Group/ –The International Islamic Trade Finance Corporation (ITFC) (https://www.ITFC-IDB.org), a member of the Islamic Development Bank (IsDB) Group, has signed a US$35 million sovereign financing facility with the Republic of Djibouti to support the development of the country’s bunkering services sector and strengthen its position as a strategic regional maritime and trade hub.

The facility was signed at the ITFC Headquarters in Jeddah by Eng. Adeeb Yousuf Al-Aama, Chief Executive Officer of ITFC, and H.E. Ilyas Moussa Dawaleh, Minister of Economy and Finance in charge of Industry of the Republic of Djibouti.

The financing facility is expected to contribute to Djibouti’s economic growth and revenue diversification by reinforcing the competitiveness and attractiveness of the Djibouti Port as a “one-stop port” offering comprehensive vessel-related services. With Red Sea Bunkering (RSB) as the Executing Agency, the facility will support the procurement of refined petroleum products, thus boosting RSB’s bunkering operations, enhancing revenue diversification, and consolidating Djibouti’s role as a key logistics and trading hub in the Horn of Africa and the wider region.

We look forward to deepening this partnership, creating new opportunities, and leveraging collaborative programs to advance key sectors and drive sustainable economic growth

Commenting on the signing, Eng. Adeeb Yousuf Al-Aama, CEO of ITFC, stated:

“This financing reflects ITFC’s continued commitment to supporting Djibouti’s strategic development priorities, particularly in strengthening energy security, port competitiveness, and trade facilitation. We are proud to deepen our partnership with the Republic of Djibouti and contribute to sustainable economic growth and regional integration.”

H.E. Ilyas Moussa Dawaleh, Minister of Economy and Finance in charge of Industry of the Republic of Djibouti, commented: “Today’s signing marks an important milestone in the development of Djibouti’s bunkering services and reflects our strong and valued partnership with ITFC, particularly in the oil and gas sector. This collaboration supports our ambition to position Djibouti as a regional hub for integrated maritime and logistics services. We look forward to deepening this partnership, creating new opportunities, and leveraging collaborative programs to advance key sectors and drive sustainable economic growth.”

This facility forms part of the US$600 million, three-year Framework Agreement signed in May 2023 between ITFC and the Republic of Djibouti, reflecting the strong and growing partnership between both parties.

Since its inception in 2008, ITFC and the Republic of Djibouti have maintained a strong partnership, with a total of US$1.8 billion approved primarily supporting the country’s energy sector and trade development objectives.

Distributed by APO Group on behalf of International Islamic Trade Finance Corporation (ITFC).

Continue Reading

Trending