IT managers are failing to protect data on corporate mobile devices by not enforcing PIN codes and passwords to protect the data stored on their laptops, PDAs and mobile phones, according to a new study.