Most strategies for mobile-device management focus on the device instead of malware, even though malware is a greater threat than loss of the device, says Peter Gibbons, head of information security at Network Rail. He attributes that to the way the security industry has evolved, with its historic focus on anti-intrusion technology. Only lately have vendors focused on protecting data.