HP Wolf Security has conducted research into platform security and its deficiencies.

A new report from HP Wolf Security reveals serious vulnerabilities in the device lifecycle. Inadequate attention to hardware and firmware security leads to risks and inefficiencies, the study says.

Platform security is often overlooked

HP Wolf Security surveyed more than 800 IT and security decision-makers and 6,000 remote employees worldwide. According to the report, 81 percent of IT decision makers see hardware and firmware security as a priority, but investments in this area are often ignored. This creates risks throughout the entire life cycle of devices, from selection to decommissioning.

When selecting vendors, 34 percent of IT decision makers report that vendors fail cybersecurity audits. During onboarding, 53 percent share weak BIOS passwords with multiple users. In addition, more than 60 percent do not perform timely firmware updates for fear of errors (FOMU).

Lost or stolen devices cost businesses $8.6 billion annually. Almost 20 percent of home workers reported a device loss only after 25 hours. This highlights the need for better monitoring. When dismantling devices, 47 percent are concerned about data security, which makes recycling difficult and contributes to electronic waste.

Solutions for a safer life cycle

The report contains recommendations to improve safety. IT, security and procurement teams need to work more closely together when selecting suppliers. Using zero-touch onboarding can improve security during installation. Rapid deployment of firmware updates is critical to ongoing management.

Monitoring and recovery should also be strengthened, with tools to remotely lock or wipe devices. Finally, it is recommended to securely erase hardware and firmware data in order to recycle or reuse devices responsibly.

The research highlights the need for a new approach that focuses on platform security from beginning to end of lifecycle. HP encourages companies to adopt a Zero Trust approach and prioritize security when purchasing and managing devices.