Unmanaged Devices Are a Growing Security Risk

The tech and security industries are known for tackling big challenges, yet many companies have failed to address at least one major risk: unmanaged devices. Jeff Shiner at DarkReading reports that these are personal laptops, tablets, and phones used for work without mobile device management oversight.

Lack of visibility and control over these devices creates a significant security risk, yet nearly half of companies still allow them to access sensitive data.

Unmanaged devices have been overlooked because companies can pass audits and security assessments without addressing the risks associated with them. However, the consequences of ignoring them can be severe.

A compromised, unmanaged device often leads to data breaches. Statistics show that 92% of ransomware attacks in 2024 involved unmanaged devices. Security leaders face real challenges because traditional tools like mobile device management are not designed to deal with them effectively.

Despite the difficulties, companies must find ways to secure unmanaged devices. The security industry has already overcome similar obstacles, such as rethinking authentication in the shift to zero trust.

According to the author, the same innovative mindset is needed now. While allowing personal devices to be used for work can improve productivity, businesses must implement controls to verify device legitimacy and prevent unauthorized access. Stricter security measures are essential for high-risk roles, such as developers with privileged access.

Lawyers should note that addressing unmanaged device security is critical to protecting confidential information and maintaining compliance. Firms and departments should assess device policies, implement verification measures, and ensure that high-risk users operate in secure environments.