Connect with us

Hi, what are you looking for?

SecurityWeekSecurityWeek

Data Protection

The Risky Business of Company Email – Are Limitations Threatening Security?

According to recent research conducted by Mimecast, while 71% of employees understand the risks, 47% still feel that it’s okay to use personal accounts to send work emails. The goal of Mimecast’s Generation Gmail Research project is to reveal how email is used by employees across the globe. And, in this particular segment, how attitudes about work email are changing and how progressive employers are managing this core communication channel.

According to recent research conducted by Mimecast, while 71% of employees understand the risks, 47% still feel that it’s okay to use personal accounts to send work emails. The goal of Mimecast’s Generation Gmail Research project is to reveal how email is used by employees across the globe. And, in this particular segment, how attitudes about work email are changing and how progressive employers are managing this core communication channel.

Company Email UsageThe research found that 79% of all employees send work emails from their personal email accounts, with 1 in 5 saying they do this on a regular basis. Awareness of the security risks this behavior poses does not act as a deterrent: 71% of people questioned recognize that there is an additional risk in sending work documents outside the corporate email environment, but 47% of these same respondents feel it is acceptable to send work emails and documents to personal email accounts anyway.

The most important conclusion that can be drawn from the report is that IT departments worldwide are fighting a losing battle in seeking to constrain employees’ behavior through policy alone. Today’s information workers, or “Generation Gmail,” want the same flexibility with their workplace email as they have with their personal email — when they don’t get it they resort to using their personal email for work.

What’s the solution? The findings call for a new approach: empower employees while protecting company data and ensuring compliance.

While IT-imposed limitations drive employees to use personal accounts, simply moving from a “controlling” to an “empowering” environment won’t cut it. Why? Because only 40% of respondents said they would be less likely to use their personal email account for work purposes if they had an unlimited work mailbox. So, it appears that a technological solution is also needed to ensure compliance and reduce the need to work around the limitations of corporate email.

Additional key findings of the research included:

• 66% of employees responded that email is their favorite means of communication.

• When asked what the reasons were to use personal accounts for work purposes, 71% responded that it was to work on documents remotely, 21% said it was to send files too big for their company mailbox; 18% wanted to take documents with them when they left a company; and 9% simply didn’t want to carry their laptop home.

• Only half of email workers (54%) say that their company has an email policy, 29% say there is no email policy and 1 in 6 (17%) don’t even know.

Advertisement. Scroll to continue reading.

• At companies where email policies exist, 42% of these policies cover email management and only 30% include issues relating to email retention. Most policies are related to the appropriate use of email (88%) in the business.

• 4 in 10 (40%) of corporate email users think that their organization’s email policy could be better communicated.

• When asked to rank their biggest frustrations with work email, 39 % of respondents said managing mailbox contents to keep it within certain limits; 25% were frustrated about messages saying their mailbox was full; 17% felt the inability to send/receive messages when over a size limit was frustrating; 15% were frustrated that they had to send emails to personal accounts; and 6% were frustrated by having to use tools like YouSendIt to send large files.

Chart

Peter Bauer, CEO and co-founder of Mimecast states, “Getting employees to care about this risk is only part of the solution; employers must take responsibility for closing this disconnect through a holistic effort encompassing email systems, policy and culture. The most progressive companies will be those whose email systems and policies support the needs of both the business and its employees.”

Read More in SecurityWeek’s Email Security Section

Written By

Click to comment

Trending

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Join the session as we discuss the challenges and best practices for cybersecurity leaders managing cloud identities.

Register

SecurityWeek’s Ransomware Resilience and Recovery Summit helps businesses to plan, prepare, and recover from a ransomware incident.

Register

People on the Move

Attack detection firm Vectra AI has appointed Jeff Reed to the newly created role of Chief Product Officer.

Shaun Khalfan has joined payments giant PayPal as SVP, CISO.

UK cybersecurity agency NCSC announced Richard Horne as its new CEO.

More People On The Move

Expert Insights

Related Content

Application Security

Cycode, a startup that provides solutions for protecting software source code, emerged from stealth mode on Tuesday with $4.6 million in seed funding.

Data Protection

The cryptopocalypse is the point at which quantum computing becomes powerful enough to use Shor’s algorithm to crack PKI encryption.

Artificial Intelligence

The CRYSTALS-Kyber public-key encryption and key encapsulation mechanism recommended by NIST for post-quantum cryptography has been broken using AI combined with side channel attacks.

Cloud Security

Cloud security researcher warns that stolen Microsoft signing key was more powerful and not limited to Outlook.com and Exchange Online.

Compliance

The three primary drivers for cyber regulations are voter privacy, the economy, and national security – with the complication that the first is often...

Compliance

Government agencies in the United States have made progress in the implementation of the DMARC standard in response to a Department of Homeland Security...

Email Security

Many Fortune 500, FTSE 100 and ASX 100 companies have failed to properly implement the DMARC standard, exposing their customers and partners to phishing...

Data Protection

While quantum-based attacks are still in the future, organizations must think about how to defend data in transit when encryption no longer works.