by James Torrence
The internet is an essential part of both personal and professional life. People use the internet to complete tasks ranging from banking to buying groceries. Organizations use the internet to afford their employees access to networks/information whether in the office, working from home, or working on-the-move. In order to accommodate the growing need for internet access, there has been a 4,414 percent increase in the number of Wi-Fi hotspots in the United States since 2013 (Covington, 2016). There are roughly “54 million Wi-Fi hotspots” (Covington, 2016) in 2016, with the number growing daily. The increase in internet availability creates more opportunities to be connected if one is outside the home or office, has limits on cell phone data, or is out of cellphone coverage. Though there are more opportunities to be connected, there are also more risks; public Wi-Fi is inherently insecure.
David Maimon, Associate Professor of Criminal Justice at University of Maryland, sums it up as follows:
The major hazard with public Wi-Fi is the fact that all the information you’re transferring between your computer and the computer that you’re accessing is available to everybody on the network (Hill, 2015).
The risks of Wi-Fi hotspots are compounded when users do not understand how Wi-Fi networks work, and thus do not comprehend the risks associated with connecting to a free hotspot. In a 2016 study, it was determined that “the level of ignorance” (Schlesinger, 2016), with regard to the understanding of free Wi-Fi networks, is “somewhat alarming” (Schlesinger, 2016), and that “more than 60% of consumers think their information is safe when using public internet…” (Schlesinger, 2016). This is an important topic not just because of ramifications of personal information that could be exposed, but also for organizations whose employees access organizational information on networks that are not secure. It is evident that a new method of educating and informing employees about the dangers of free Wi-Fi is necessary to help protect both personal and organizational information. The author will put forth a framework that can be integrated into existing employee ecosystems, augment existing policy, and better protect organizational and personal information. Before introducing the framework, it is first necessary to understand why public Wi-Fi is insecure, why the problem will continue to persist, and how organizations can successfully implement a new framework.