Android Is Still Scaring Off Enterprise Customers

Wayne Rash,

If Android is going to succeed in the enterprise, Google needs to address some of the basic security and privacy issues that make IT managers shy away

The Motorola Droid is about to get Android 2.2, a big step in the Android universe. With the new version of the operating system will come support for Flash, better security and presumably more stable operation.

The automatic update, which will start for the original Droid the week of 2 August, has been eagerly anticipated, but there’s still a lot that needs to be done if the Droid and its cousins are going to find a warm welcome in the enterprise. Don Reisinger has pointed out 10 issues that could derail Android’s early record of success, including the need for greater attention to privacy, security and support for enterprise users.

Enterprise security

Improving enterprise support is a particularly important factor. For example, while Android 2.2 supports Microsoft Exchange and ActiveSync, it’s not totally functional for some of the limits that ActiveSync has the ability to impose. You can require users to use a password or PIN to use the device, and you can perform a remote wipe. But even though ActiveSync has the ability to turn off features like the camera or Bluetooth, the Droids won’t comply.

For many organisations, cameras are especially troublesome since they give users a way to quietly record documents or other intellectual property, or to compromise security. This is why you can buy a BlackBerry without a camera, for example.

There are other fairly glaring security failures as well. One of the really nice things about the Android family is that you can use applications that aren’t centrally controlled through an application store. This means that you don’t need to check with Google before developing a custom application for your Android device. In addition, Google is famous for being very open about the applications that it allows in its application store.

But the revelation that the company had to pull an application from its store that was funneling information to a site in China is enough to give enterprise security managers pause. Is it now necessary to buy malware detectors and antivirus software for your phone? Of course, they wonder the same thing about Google itself, which is famous for collecting data from Android phones for aggregation into its products.