No Device Left Behind

A 2025 Kaspersky survey showed Kenyan professionals use multiple devices for work: along with a computer, 36 per cent of respondents also use a mobile phone, and 26 per cent use a tablet as well. The Cybersecurity In The Workplace: Employee Knowledge And Behaviour survey also indicated that only 73 per cent of respondents acknowledged having cybersecurity protection solutions installed on all devices that they use to access business information, and 4 per cent of those surveyed don’t know if their devices are protected or not.

The survey, conducted by Toluna, sampled 2,800 online interviews with employees and business owners using computers for work in seven countries: Türkiye, South Africa, Kenya, Pakistan, Egypt, Saudi Arabia, and the UAE.

Critically, securing all devices used to access business data is essential to protect sensitive information and maintain operational integrity. Devices that lack essential protection can be exploited by cyber attackers to gain unauthorised access, steal data, deploy ransomware, or disrupt business operations.

“With the increasing reliance on cloud services, remote work, and mobile access, businesses need to implement comprehensive security measures. Cyber hygiene – or simply said good IT habits, security policies and the use of robust security solutions are essential practices for protecting business systems,” said Brandon Muller, Technical Expert for the MEA region at Kaspersky, adding that “Security solutions should include endpoint protection for every device that accesses business information. Multi-factor authentication, regular software updates, and backups are must-haves now.”

Within the past 12 months, 57 per cent of respondents in Kenya admitted to using their work devices for personal purposes (watching movies/ YouTube, playing games, shopping, holiday bookings, etc.), 44 per cent connected work devices to public Wi-Fi networks, 11 per cent lost their devices, and 11 per cent also had their devices stolen. These figures underline the need for a cyber hygiene mindset and security solutions for all endpoints, as each of them presents cybersecurity risks to a business.

Personal use of work devices can lead to the installation of unauthorised apps or exposure to malicious websites, increasing the chance of malware infections or data leaks. Connecting to public Wi-Fi networks, which are often unencrypted and poorly secured, can allow cybercriminals to intercept sensitive business data or inject harmful software, so it should be secured with a VPN.

Additionally, if a device is lost or stolen and lacks proper security controls – like strong passwords, encryption, or remote wipe capabilities – critical business information could fall into the wrong hands.

To help organisations strengthen their defences, it is advisable to:

• Implement security policies for employees, from password and software installation policies to network segmentation and data encryption.
• Arrange regular employee education and cybersecurity training, where specific solutions can help to develop practical cybersecurity skills.
• Implement robust endpoint and network protection and monitoring solutions that would suit businesses of all sizes.