Bring Your Own Application (BYOA)

 

Bring (or Build) Your Own Application (BYOA) is a point of contention for many companies from a cyber security context. They may only find out about these ‘skunkworks’ applications by scanning their domain or by going through procurement to find out what spend has been approved and tracking where that money was spent – ‘follow the money’.
 
BYOA allows for innovation and productivity to flourish but left unchecked also creates a significant cyber security risk for the organisation.
 
Aside from ‘following the money’ and scanning domains, other approaches suggested include creating policies that have a strong stick while providing a space for innovation to occur under a formalised BYOA process that then monitors access, use and traffic extensively to pick up unexpected and potentially malicious activity.

Leave a Reply

Your email address will not be published. Required fields are marked *