Boyd and India

India and BYOD

IDG Connect, a division of International Data Group (IDG), the world’s largest technology media company, produces, publishes and distributes local IT and business information on behalf of a truly global client base. Established in 2005, we have a fully nurtured audience of 2.6 million professional decision-makers from 130 countries, and an extended reach of 38 million names. This lets us conduct research, create independent analysis and opinion articles, and drive long-term engagement between professionals and B2B marketers worldwide. For more information visitwww.idgconnectmarketers.com

Sponsored by:In a Maturing Market, Employee Satisfaction Is The Top Priority

India & BYOD:

Intel APJ/BYOD Research (Australia, India, South Korea & Taiwan)

Audience Segment: Large and medium-sized enterprisesBuying Stage: General EducationDecision Role: Decision MakersAudience Type: Business Impact

www.idgconnectmarketers.com

India and BYOD


Infographic SummaryHow are payments arranged for mobile devices that employees use for work purposes?

For which of the following scenarios, if any, are employees currently using BYOD devices at your company?

From your perspective, what are the most important device features when making a BYOD selection or support decision?

India: in summary

• Relatively low levels of smartphone penetration• Strong focus among enterprises (500+ employee organisations) on technological solutions to the risks induced by BYOD• Indian IT managers ambitiously endorse the idea that BYOD boosts productivity, creativity and innovation among employees• However, the growing prevalence of mobile devices inside organisations is causing significant increases in security-related and administration workload

Employees pay (BYOD)

Employer pays

Subsidy (CYOD/approved range)

Subsidy (CYOD/free choice)

Personal productivity (e.g. email, office applications)

Content presentation (e.g. e-catalogue, sales material)

Video (e.g. training, video conferencing)

Data collection & management (e.g. inventory, warehouse, maintenance)

Office automation (e.g. approving documents or payments)

Dedicated use in operations (shared by employees)

Compatibility with our other technology

Supports security and/or manageability features

Hardware performance

Longer battery life

Applications available for business

India Average

India Average India Average

76%

63%

62%

59%

50%77%

68%

62%67%

67%61%

66%56%

53%64%

43% 41%

6%

18%

36%

15%19% 21%

59%

64%

50%

52%

52%

52%

45%


India and BYOD


Once a rarity, BYOD programs have become a mainstream reality in large and medium-sized enterprises across Asia Pacific. Broadly speaking, this is the case in all four of the Asia Pacific territories in which we surveyed a total of 300 IT managers during March 2014 (Australia, India, South Korea and Taiwan).(1) Our aim was to find out how IT managers in the region approach the requirements, challenges and benefits of BYOD. Across all four territories, the following findings emerged:

• BYOD has become the norm: Only 9% of the organisations we surveyed across Asia Pacific say that they do not allow employees to bring their own devices into work for work purposes.

• The employer-liable approach is declining steadily: Today, 39% of IT managers say their organisation pays for devices. In 18 months, only 35% say this will be the case.

• Employee-liable BYOD is declining rapidly: Today, 34% of IT managers in the four territories we studied say employees pay for their devices. In 18 months, only 17% expect this to still be the case.

• Subsidy emerging as dominant approach: The number of organisations subsidising the cost of a device for employees is expected to rise during the next 18 months: from 25% today, to 37% in 18 months’ time. Subsidy schemes often involve reassertion of corporate control. Notably, 50% of organisations already mandate the use of certain operating systems or hardware brands.

• Usage is becoming deeper and wider: Nearly two-thirds of the IT managers we surveyed (64%) say employees use BYOD devices for personal productivity (email, Office etc.). However, a majority of employees are also using mobile devices for tasks ranging from data collection (e.g. inventory management in a warehouse) to office automation (signing off documents).

• IT managers are seeing gains in productivity and employee satisfaction: BYOD has increased administration workloads “somewhat” or “significantly” for 75% of IT managers in the region. However, six out of ten IT managers say that that the primary benefits of BYOD include productivity gains and increased employee satisfaction. Despite this, some ambivalence continues to lurk in the background: four out of ten (42%) told us they feared that staff use BYOD devices “for leisure not work”.

• Human intervention now plays a vital role in the effort to control security risks: More organisations minimise security risks via employee codes of conduct (74%) and user training (66%) than software-based solutions that allow remote device wiping (65%).

• Security challenges define perceptions of risk: 89% say security challenges have increased “somewhat” or “significantly” as a result of BYOD.

Introduction


India and BYOD

Our survey of Indian IT managers focuses entirely on respondents working for organisations with 500+ employees, many of them operating in technology, telecoms, IT services and consulting. As such, our findings need to be interpreted as a snapshot of a specific (and important) segment of Indian business, rather than as a portrait of Indian business as a whole.

The Indian consumer market is rapidly switching from feature phones to smartphones. (According to IDC, 44m smartphones were sold in India during 2013, rising nearly threefold from 16m in 2012.) However, overall rates of penetration remain low by comparison with

both developed economies and many rapidly developing economies. The installed base of smartphones in India amounts to 72m, but this figure needs to be placed in the context of an economically-active labour force of approximately 484m. (1)

When it comes to BYOD, India’s preference for Android is pronounced. India is the only territory we surveyed where Android smartphones and Android tablets take no.1 and no.2 slots in the list of devices most likely to be allowed for BYOD usage.

Windows-based devices are more regularly used in a BYOD context in India than in the other territories we studied (i.e. Australia, South Korean or Taiwan). Windows-based smartphones and notebooks are more frequently approved for use within Indian organisations on a BYOD basis than Apple smartphones and tablets.

Within Indian organisations, Apple devices are less likely to be authorised for BYOD usage than either Android or Windows devices.

Which of the following devices are employees currently allowed to bring into work and use for work purposes? And which of these will be allowed in addition over the next 18 months?

BYOD: Employee-Owned Devices Allowed for Workplace Use

Windows devices

Android devices

Apple devices

India AverageCurrently In 18 months

Windows devices

Android devices

Apple devices

81%

80%

75%

11%

12%

15%

85%

84%

69%

10%

13%

19%

1

Windows tablets

Android smartphones

2 Windows notebooks

3 Apple smartphones

4 Apple tablets

5

TOP 5 BYOD DEVICES ALLOWED IN THE WORKPLACE

India and BYOD

In all of the four territories we surveyed, we asked respondents about the way in which BYOD devices are financed, and how this is likely to change in the next 18 months. Across the region, a significant shift is occurring: within the next 18 months, employees will become less and less likely to pay for their devices as organisations shift towards a subsidy model. India is no exception: today, one in five Indian organisations (21%) operate some kind of subsidy scheme. The IT managers we interviewed in India suggest that this number will double to 40% by late 2015.

The way in which this shift is occurring in India is intriguing. In Australia, for example, we’re seeing a pronounced shift from employee-financed BYOD to CYOD, which involves employees applying for

a corporate subsidy to purchase a device from an approved range (filtered for security compatibility and ease of access to corporate data).

In India, it’s certainly true that some organisations are shifting from BYOD to CYOD. Today, this is a relatively popular strategy (adopted by 15% of organisations). By late 2015, our respondents expect 19% to operate in this way.

Alongside this, however, a more dramatic shift is occurring: from BYOD to a variant of CYOD which leaves employees completely free to purchase the device of their choice. Today, only 6% of Indian organisations operate in this basis: by late 2015, IT managers expect 21% of Indian companies to operate a free-choice subsidy regime.

Clearly, Indian enterprises’ approach to enterprise mobility is significantly influenced by a laissez-faire philosophy. As we will see, this approach has its costs, in terms of the administration overhead and security vulnerabilities.

The switch to subsidy is most obviously particularly marked among organisations that previously left it to employees to finance their own device purchases. Within the next 18 months, the number of Indian companies that leave employees to fund the cost of device purchases is set to halve from 36% to 18%. By contrast, the proportion of Indian enterprises that pay for their employees’ mobile devices is expected to remain steady at around 40%.

Ownership and Funding

How are payments arranged for mobile devices that employees use for work purposes?

Employees pay (BYOD) Employer pays Subsidy (CYOD/approved range)

Subsidy (CYOD/free choice)

India Average

43% 41%

6%

18%

36%

15% 19% 21%

India and BYOD

Although a majority of the mobile devices employees use at work will continue to be employer-liable for the foreseeable future, a minority of Indian organisations are embracing the shift to free-choice subsidised devices enthusiastically. It therefore comes as little surprise to see Indian enterprises we surveyed displaying above-average enthusiasm for managing access to the corporate network.

In India, BYOD policy oscillates between two poles: on the one hand, the laissez-faire approach which offers employees substantial choice in terms of device selection; and on the other, an attempt to mitigate the risks of this approach by deploying a profusion of technology-led solutions.

A majority of the Indian organisations we surveyed use passwords and/or encryption as basic authentication tools when employees access corporate networks using their own devices. Four out of ten Indian organisations (similar to the proportions in Australia and Taiwan) organise access to corporate networks, or would prefer to do so, by arranging tiers of access privileges that allow specific categories of employee to access specific resources on corporate servers according to their status and role.

Virtual private networks (VPNs) are more frequently favoured in India than in any of the other territories we studied. Six out of ten Indian organisations tell employees to use VPNs. (In Australia, South Korea and Taiwan it’s closer to four in ten.)

Indian organisations are notably interested in two evolving approaches to networked security: mobile

device management and biometrics. Six out of ten respondents claimed their organisation is using, or would use, mobile device management software. Nearly half said they are using, or would use, biometrics (i.e. the use of distinguishing human characteristics, including – most obviously – fingerprints).

In assessing these results, it’s important to remember the nature of the underlying survey question, which asked respondents how they actually control access to enterprise applications, or how they might do so. In other words, this survey question assesses preferences rather than actual deployments. The prevalence of enthusiasm for biometrics in India may well be associated with substantial government funding made available for national projects, including the Unique Identification Authority of India (UIDAI) and its Aadhaar ID scheme, which relies upon fingerprint and iris scanning.

How do you (or would you) control access to enterprise applications from employee-owned devices?

Reducing Risk By Controlling Access & Devices

0

10

20

30

40

50

60

70

80

India All territories

1 - Password2 - Encryption3 - VPN4 - Tiered access privileges5 - Mobile device management6 - Biometrics7 - No control

1 2 3 4 5 6 7

Perc

enta

ge

77%

73%62%

61%

49%

59%

40%

43%

58%

42%

44%

30%

2% 2%

India and BYOD

Uses & Benefits: BYOD in Action

For which of the following scenarios, if any, are employees currently using BYOD devices at your company?

A majority of Indian IT managers say that employees use their mobile devices in the workplace to complete a wide range of tasks. In other territories we surveyed – for example, Australia – usage appears to be a good deal more conservative, and use cases are frequently clustered around personal productivity (which, in many cases, means email). In India, usage occurs among a wider cross-section of employees undertaking a wider range of tasks.

• Indian employees use mobile devices for personal productivity, content presentation and work-related video more intensively than employees in the other territories we studied.

• Usage in process-driven contexts (e.g. data collection, office automation, dedicated use in operations) is also high.

It bears repeating that this survey asked for the views of IT managers working for large (500+ employee) organisations. Clearly, usage on this scale isn’t necessarily occurring in other, smaller, organisations.

Overall, however, Indian IT managers are more enthusiastic about the benefits of enterprise mobility than many respondents in other territories. Strikingly, their enthusiasm recognises both pragmatic gains (e.g. BYOD has the effect of reducing hardware costs) as well as more abstract and conceptual benefits (e.g. enterprise mobility’s impact on innovation and creativity).

• 69% of Indian respondents see productivity gains as a key benefit of BYOD (or CYOD). By contrast, in Australia, only 51% of IT managers agree.

• 56% describe “increasing innovation and creativity” among users as a key benefit. Only 40% of Australian IT managers agree with this statement.

• 58% of Indian IT managers say a BYOD policy helps to “hire and retain highly skilled staff”. In Australia, only 32% agreed.

Personal productivity (e.g. email, office applications)

Content presentation (e.g. e-catalogue, sales material)

Video (e.g. training, video conferencing)

Data collection & management (e.g. inventory, warehouse,

maintenance)

Office automation (e.g. approving documents or payments)

Dedicated use in operations (shared by employees)

India Average

64%

50%

52%

52%

52%

45%

India Average

76%

63%

62%

59%

50%

59%

India and BYOD

Indian employees use mobile devices in the workplace frequently, and for a wide range of tasks. Indian IT managers perceive multiple benefits in this usage. However, they are also more likely than their peers in other territories to have concerns about employees using their mobile devices in the workplace. Three out of their top five concerns revolve around security: namely, exposure to malware, the risks of device loss and governance breaches.

One other striking concern is the potential for employees to “use [mobile devices] for leisure rather than work” (51% cited this concern). Quite possibly, the concern being voiced here is less about what

employees do with their mobile devices, and more about the unintended consequences of those actions. In other words, when Indian IT managers worry about staff using their devices for leisure purposes, what they may really be voicing is a concern about security.

Indian IT managers find themselves challenged by the workload associated with BYOD. We asked the IT managers we surveyed for their views on how BYOD/CYOD had impacted security. In Australia, South Korea and Taiwan, around one-quarter of respondents told us that BYOD/CYOD had increased security challenges significantly. In India, by contrast, a majority – 53% - agreed with this statement.

Similarly, Indian organisations seem to be struggling with the administration workload imposed by BYOD/CYOD; 45% told us that BYOD had “significantly increased” their organisation’s IT administration overhead.

Aside from security, 55% told us that their main concern revolved around compatibility between devices and key applications and services. Here, the focus lies not so much on what could go wrong as how to make mobile usage as productive as possible.

Overall, the survey results suggest that a large number of Indian enterprises are mainly focused upon ensuring that employees enjoy as much mobile access as possible. Over time, however, concerns have emerged as a result. Within many organisations, the deployment of technology-based solutions (or the intention to deploy them) has so far failed to address a mounting crisis in terms of security and administration workloads. In India, BYOD has become a high stakes risk-reward scenario, in which the prospect of huge benefits will increasingly need to be balanced against substantial risks (and the need to mitigate them).

The Challenges of BYOD: Security, Work Patterns & Manageability

What concerns do you have about BYOD schemes?

51%53% 50% 55% 49%

More virus or malware

infectionData or device

lossStaff will use for leisure, not work

Compatibility with key

applications or services

Loss of enterprise IT

control

Governance breaches

49% 44% 42% 41% 39% 38%Average

India 49%

India and BYOD

Decision-making around the selection and support of devices appears to be relatively thorough in India. More Indian IT managers say they impose more criteria on the decision-making process than is the case in other territories we surveyed.

When it comes to deciding whether to select or supply specific mobile devices, Indian IT managers marginally prioritise the needs of the IT department over the needs of employees. This is perhaps unsurprising in

a context where security- and administration-related workloads have become a serious issue.

Over three-quarters (77%) - more than in any of the other territories we studied - say that “compatibility with our other technology” is a primary concern. This may well be explained by the tendency for Indian organisations to use multiple, overlapping, techniques for user authentication and access management.

Two-thirds require mobile devices to support specific security and manageability criteria. Clearly, this reflects the challenges that Indian respondents say they face in terms of BYOD-related security issues and administration overhead.

Three out of five of Indian respondents’ decision-making criteria revolve around the user experience. Typically, Indian IT managers pay a good deal of attention to the availability of preferred processors, hardware performance and battery life.

Buying Criteria: How IT Managers Assess Mobile Devices for Corporate Use

From your perspective, what are the most important device features when making a BYOD selection or support decision?

Compatibility with our other technology

Supports security and/or manageability features

Hardware performance

Longer battery life

Applications available for business

India Average

64%68%

53%77%

62%67%

61%67%

56%66%

53%64%

India and BYOD


This survey suggests the existence of a substantial commitment to BYOD and CYOD among India’s IT managers. This commitment is underpinned by a belief in the benefits of enterprise mobility. Questioned about their views on this, Indian IT managers acknowledged both pragmatic benefits (e.g. recognising that BYOD reduces hardware costs for their company) and more conceptual benefits (making employees more creative and innovative).

These beliefs appear to be underpinned by usage patterns. In Indian organisations, mobile devices are used for a good deal more than making calls and writing emails. Substantial numbers of employees appear to be using mobile devices for a wide variety of tasks.

The transition from BYOD to CYOD is in full swing. Indian organisations have embraced this transition, and rank among the region’s most enthusiastic adopters of subsidy-based free choice device schemes. In the context of pre-existing challenges with manageability, it’s hard to ignore the suggestion that some enterprises moving down this path are merely storing up more challenges for the future.

Moreover, the potential downside of IT consumerisation is all too clear to India’s IT managers: security challenges, in particular, loom large on the list of concerns. Indian organisations have responded by investing to minimise the downsides of BYOD/CYOD. As well as traditional solutions including tiered access controls and VPNs, Indian organisations appear intent upon exploiting mobile device management software and biometrics.

Conclusion

(1) Source: IDC, IDC Mobile Phone Tracker (2014); World Bank/ International Labour Organization, Labour Force, 2009-2014.

Document footnotes


http://data.worldbank.org/indicator/SL.TLF.TOTL.IN

Documents

Boyd and India