IT leaders are facing major work device blind spots – and it's putting security at risk
The use of unauthorized devices is putting enterprises at huge risk
Nearly a quarter of UK businesses detect unauthorized devices accessing corporate data at least every month, with nearly half having experienced a data breach caused by unmanaged devices during the last year alone.
In a recent survey, more than two-thirds (67%) of IT leaders told endpoint management provider Scalefusion they lack complete visibility into the work devices used across their organization.
30% off Keeper Security's Business Starter and Business plans
Keeper Security is trusted and valued by thousands of businesses and millions of employees. Why not join them and protect your most important assets while taking advantage of this special offer?
More than half (58%) reckoned they had 'mostly visible' systems with 'a few blind spots'.
However, thanks to the shift to hybrid and remote working, 64% said they'd found previously unknown devices or applications being used for work purposes in the last year.
This is leading to frequent security incidents among affected companies, the study found. For example, of the 48% who experienced breaches from unmanaged devices, 35% said they were being attacked at least once a month.
"These findings confirm what we've been hearing from businesses across the UK and Ireland – there's a critical gap between the security challenges organisations face and their ability to address them effectively," said Sally King, Scalefusion's channel sales manager for the UK and Ireland.
"What businesses need is visibility and simplification – a unified approach that brings all endpoints under one management umbrella rather than juggling multiple disconnected systems.”
Sign up today and you will receive a free copy of our Future Focus 2025 report - the leading guidance on AI, cybersecurity and other IT challenges as per 700+ senior executives
One-in-five employees don't know whether their organization authorizes the use of personal devices for work, yet 40% are doing so on a daily basis. Three-quarters said this was for easier access while 56% also highlighted flexibility.
Tool sprawl is exacerbating the problem
Notably, attempts to address security challenges may actually be making matters worse, Scalefusion warned. Nearly six-in-ten companies now use four or more different endpoint security tools, causing significant operational challenges.
More than half (53%) said that this has led to increased administrative overhead, while 35% reported a lack of interoperability between systems. Similarly, 41% said they'd seen higher costs and 37% complained of critical gaps in data visibility.
Only 7% of organizations claimed that their multi-tool approach wasn't causing them any problems at all.
There were some positive trends, however. Nearly half (43%) of companies now use endpoint management platforms for employee onboarding, and 68% of IT leaders are keen to cut hands-on time per device through the use of zero-touch deployment solutions.
"This research captures something we've been observing for a while: the tools meant to protect organizations are often the same ones creating their biggest blind spots," said King.
"IT teams are drowning in dashboards while employees quietly work around systems that slow them down."
Make sure to follow ITPro on Google News to keep tabs on all our latest news, analysis, and reviews.
MORE FROM ITPRO
Emma Woollacott is a freelance journalist writing for publications including the BBC, Private Eye, Forbes, Raconteur and specialist technology titles.
-
Satya Nadella says a 'telltale sign' of an AI bubble is if it only benefits tech companies – but the technology is now having a huge impact in a range of industriesNews Microsoft CEO Satya Nadella appears confident that the AI market isn’t in the midst of a bubble, but warned widespread adoption outside of the technology industry will be key to calming concerns.
-
Enterprise security in a world of AI deepfakes and uncertainty over identityAs AI-driven deepfakes grow more sophisticated, enterprises must move to layered defenses that protect trust without friction
-
NCSC names and shames pro-Russia hacktivist group amid escalating DDoS attacks on UK public servicesNews Russia-linked hacktivists are increasingly trying to cause chaos for UK organizations
-
An AWS CodeBuild vulnerability could’ve caused supply chain chaos – luckily a fix was applied before disaster struckNews A single misconfiguration could have allowed attackers to inject malicious code to launch a platform-wide compromise
-
There’s a dangerous new ransomware variant on the block – and cyber experts warn it’s flying under the radarNews The new DeadLock ransomware family is taking off in the wild, researchers warn
-
Supply chain and AI security in the spotlight for cyber leaders in 2026News Organizations are sharpening their focus on supply chain security and shoring up AI systems
-
Veeam patches Backup & Replication vulnerabilities, urges users to updateNews The vulnerabilities affect Veeam Backup & Replication 13.0.1.180 and all earlier version 13 builds – but not previous versions.
-
NHS supplier DXS International confirms cyber attack – here’s what we know so farNews The NHS supplier says front-line clinical services are unaffected
-
LastPass hit with ICO fine after 2022 data breach exposed 1.6 million users – here’s how the incident unfoldedNews The impact of the LastPass breach was felt by customers as late as December 2024
-
Researchers claim Salt Typhoon masterminds learned their trade at Cisco Network AcademyNews The Salt Typhoon hacker group has targeted telecoms operators and US National Guard networks in recent years

