Android and security: How secure are Android devices?

When it comes to mobile operating systems, Android is decisively ahead. In Q3 2023, Android's global market share in this area was an impressive 70.46 percent. This means that almost three quarters of all people use an Android device. They make bank transfers, register for doctor's appointments or use company smartphones to contact customers. All of these uses involve extremely sensitive personal data. The protection of this data—whether our own or that of others—must therefore be a central component of every operating system. The informed and prudent behavior of employees is also essential for corporate (mobile) security. In the past, Android has sometimes been heavily criticized. The focus was often on the security of the Google Play Store. This is where users can download apps for their devices. In an investigation in 2020, many of the apps did not meet current security standards. The fear is that downloading unsafe apps from the Play Store could lead to malware being installed on end users' devices. For a long time, the Android operating system was therefore considered inferior to Apple's iOS by the general public. While "only" users' personal data would be affected in the private sphere, the security issue in the corporate context is of a completely different magnitude. Sensitive company data and customer information can be affected, cyber criminals can extort huge sums of money or, in the worst case, bring entire companies to a standstill. In 2023, in Germany alone, Sky Deutschland, Bayerischer Rundfunk, Rheinmetall, Badische Stahlwerke and Barmer Krankenkasse, for example, were affected by such attacks. Every company should therefore do everything in its power to ensure maximum protection on mobile devices.

What measures increase security under Android?

The Android operating system already provides various integrated security functions. However, companies can also take additional measures to ensure the protection of their own data. A lock screen and integrated data encryption protect your company content from unauthorized access. Sandboxing: Apps are executed separately from each other, which also contributes to security. This function is always activated. The GDPR (General Data Protection Regulation) must be complied with by all companies operating in Europe. Google, and therefore the Android service, has also committed to complying with this regulation. Remote wipe, i.e. the remote deletion of data from lost or stolen devices, is possible with Android. For companies, we generally recommend the use of mobile device management (MDM). With an MDM, your company can centrally manage all company devices.This includes registration, setup with selected apps and the separation of private and business use for COPE (corporate-owned, personally enabled). In addition to MDM, we also recommend mobile threat defense (MTD) . This protects your company from attacks via apps, networks and operating systems. More on this below. If your company has to dispose of company devices, you must also ensure appropriate security here. In order to dispose of an old cell phone properly , you should make sure that all data on the device is carefully deleted. A combination of several applications ensures the greatest security for your company devices.

Do I need a security app for Android?

We are all familiar with antivirus programs from our personal lives. The question arises as to whether such an application also makes sense for use in the workplace. The biggest hurdle here is the individual installation on the various company devices. However, if a company uses the aforementioned mobile device management, this becomes much easier. On the one hand, MDM is used to containerize the personal area and the work area. This is particularly interesting for companies that allow their employees to use their work devices for private use at the same time. By separating the private and work areas, the data is protected on both sides and in compliance with the GDPR. Work files cannot be shared via private applications and private data cannot be viewed by the employer either. An MDM also manages the company smartphones centrally. Whether security software, software updates, access permission, or other regulations: They are rolled out simultaneously to all devices registered in the MDM. In this way, your company ensures that all employees adhere to the specified rules and laws. And company data and professional contacts are successfully protected. But is mobile device management enough to protect your internal data?

Resources–Blog

Security for Android devices: Questions and measures

Data security

November 22, 20237 min read