Bring Your Own Cloud (BYOC) Spurs IT to “Bring Your Own Solution”

Sep 18, 2013 | App Modernization, Cloud, Fresh Ink, Mobile, Security

Featured Article By Dan Tully, Executive Vice President, Conduit Systems

Recent research shows 56 percent of information workers use devices that are unsupported by the network because their employer does not provide devices with similar capabilities – a fact that puts Bring Your Own Cloud (BYOC) services like Dropbox, SkyDrive and Box into full perspective. Personal cloud services are convenient, inexpensive, and always available. They also have the potential to wreak havoc on the enterprise in ways we’ve never seen before. Simply stated? Houston, we have a problem.

The knee-jerk response of many IT managers is understandable. As individuals charged with the technical well-being of an organization, the mere thought of how employees can compromise proprietary data without second thought is quite unsettling; however, it’s our responsibility to recognize that if a digital technology exists on a consumer level, it will find its way into our offices regardless of whether or not has been officially sanctioned.

Instead of trying to turn back the clock or instituting a zero tolerance policy, consider these three solutions for managing BYOC within your hallowed halls:

Reminder of Accountability

Communication is key. Update written policies to ensure that employees understand protocols and how their actions can potentially compromise the security of data on-premise, off-premise and data in the cloud. Equally important, create a culture of accountability within the organization that will make enforcement of the policy that much easier.

Pony up for the Enterprise Version

Many consumer cloud services, including Evernote and Dropbox, offer enterprise versions. These official versions help remove the dangers of BYOC by removing the risk of losing valuable data to bitter ex-employees and individuals who fancy themselves gatekeepers. In short, they enable IT departments to centrally manage employee accounts. They also erase the uncertainty of who actually “owns” said documents, since this issue is not always so cut-and-dry when it comes to the free versions.

The Best of Both Worlds

Hybrid BYOC solutions offer secure personal cloud services that mimic the unique usability of services such as Dropbox, all while hosted on the corporate network. VMware’s Octopus and Google Drive are two such options. This approach recognizes the constantly changing manner in which the enterprise is communicating and empowers users to securely access their files 24/7.

In an era where IT is no longer business-driven but user-driven, IT managers must ultimately adopt a policy of treating the problem as opposed to the symptoms. This has never been truer than in the age of “user-centricity.” By taking this approach, forward-thinking organizations will no doubt achieve differentiation and fare better than the competition while at the same time ensure the safety of proprietary data.

Dan Tully is executive vice president of Conduit Systems, an IT management services firm headquartered in Lincoln, Rhode Island. For over two decades, Conduit Systems has delivered complete and cost-effective information technology support and services that enable small and mid-sized companies to focus on doing what they do best – making their businesses thrive. Tully brings more than 20 years of computing experience to his customer base and has assisted some of New England’s largest companies address complex, technology-based issues. To reach him, email ddtully@conduitsystems.com.

Top 10 Cybersecurity Stories This Week: PHP2Shell Threatens 5.1 Million Internet-Exposed PHP Servers With Unauthenticated RCE, Eight eMudhra CA Private Keys Cracked From Public Certificates, CISA and FBI Warn SafePay Ransomware Has Hit 600+ Critical Infrastructure Organizations

Top 10 Cybersecurity Stories This Week: PHP2Shell Threatens 5.1 Million Internet-Exposed PHP Servers With Unauthenticated RCE, Eight eMudhra CA Private Keys Cracked From Public Certificates, CISA and FBI Warn SafePay Ransomware Has Hit 600+ Critical Infrastructure Organizations

October 23, 2026 | ITBriefcase.net Why it matters: Tuesday, October 21 delivered one of the heaviest single-day security disclosures of the year: PHP2Shell, GitLab CVE-2026-110264, and Node.js security releases all shipped simultaneously, each carrying unauthenticated...

read more
Top 10 Cybersecurity Stories This Week: Microsoft’s Largest Patch Tuesday Ever Tops 1,411 CVEs With Live Windows Shell Zero-Day, GhostAction GitHub Supply Chain Wave Hits 500+ Accounts and Tens of Thousands of Repositories, Ransomware Smashes Monthly Record at 1,073 Victims in August

Top 10 Cybersecurity Stories This Week: Microsoft’s Largest Patch Tuesday Ever Tops 1,411 CVEs With Live Windows Shell Zero-Day, GhostAction GitHub Supply Chain Wave Hits 500+ Accounts and Tens of Thousands of Repositories, Ransomware Smashes Monthly Record at 1,073 Victims in August

October 16, 2026 | ITBriefcase.net Why it matters: Microsoft's October 2026 Patch Tuesday is the largest software security release in the company's history — 1,411 flaws, three zero-days, 75 critical vulnerabilities, and a live Windows Shell security feature bypass...

read more
Top 10 Cybersecurity Stories This Week: FBI Warns FortiBleed Is Locking Admins Out of Their Own Firewalls, Attackers Hijack Three Country-Code Domain Registries to Obtain 12 Google HTTPS Certificates, ShinyHunters Suspect Arrested in Jordan

Top 10 Cybersecurity Stories This Week: FBI Warns FortiBleed Is Locking Admins Out of Their Own Firewalls, Attackers Hijack Three Country-Code Domain Registries to Obtain 12 Google HTTPS Certificates, ShinyHunters Suspect Arrested in Jordan

October 9, 2026 | ITBriefcase.net Why it matters: The FBI and US Secret Service issued a joint advisory on October 6 confirming that the FortiBleed credential-harvesting campaign — which has compromised credentials for 86,644 Fortinet FortiGate firewalls and SSL VPN...

read more
Top 10 Cybersecurity Stories This Week: Citrix NetScaler Dual Zero-Days Under State-Sponsored Attack, Pentagon DMDC Breach Exposes 3 Million Military Personnel Records for Nine Months, AI Agent Breaches Dutch Vulnerability Disclosure Organization Using Zammad Zero-Days

Top 10 Cybersecurity Stories This Week: Citrix NetScaler Dual Zero-Days Under State-Sponsored Attack, Pentagon DMDC Breach Exposes 3 Million Military Personnel Records for Nine Months, AI Agent Breaches Dutch Vulnerability Disclosure Organization Using Zammad Zero-Days

October 2, 2026 | ITBriefcase.net Why it matters: Citrix disclosed two critical remote code execution zero-days in NetScaler ADC and NetScaler Gateway on September 27 — CVE-2026-88771 (CVSS 9.5, unauthenticated RCE in default configuration, no special setup required)...

read more
Top 10 Cybersecurity Stories This Week: Brevo Supply Chain Attack Serves Malware to 100,000+ Websites via Stolen CDN API Key, Revolut Discloses Breach via Fake Government Requests, Gyazo 23.6 Million User Records Stolen

Top 10 Cybersecurity Stories This Week: Brevo Supply Chain Attack Serves Malware to 100,000+ Websites via Stolen CDN API Key, Revolut Discloses Breach via Fake Government Requests, Gyazo 23.6 Million User Records Stolen

September 25, 2026 | ITBriefcase.net Why it matters: Attackers compromised Brevo — the email marketing and CRM platform used by eBay, Louis Vuitton, Michelin, Amnesty International, and more than 100,000 other businesses — by exploiting a hardcoded, long-lived...

read more