Security Adviser: Unauthorized apps are still bad

13.07.2006

Most companies need a drastic wake-up call. It can be my column or a security event. It's your choice.

If you're against my recommendation to crack down on unauthorized programs, is it innovation you don't want to stop or a fear that you and your co-workers won't be able to install the latest guilty pleasure software on your work PC?

Most software that users install does not come close to fulfilling a business objective. Preventing your end-users from installing Gator, Hotbar, AIM, Party Poker, P2P file-sharing programs, illegally downloaded music, and everything else they want to install will not stop innovative progress.

IM is a good example of an app that users love but isn't necessarily good for business. About a decade ago, IM began to appear in corporate environments, installed and used by end-users without IT or administration approving it. Heck, IM vendors went so far as to create firewall-evading install routines to ensure their IM products would intentionally circumvent IT-initiated firewall policies. IM has even been incorporated into a few corporate communication products.

But for the most part, it's a complete waste of time for most businesses. Employees aren't sending IMs to other employees and partners about business issues. It's mostly a way for employees to conduct more private personal chats on company time without being seen connected to a telephone all the time.