The increase in smartphone adoption has been no less than astounding. Unfortunately, the explosive growth has been accompanied by a rash of security problems. A contributing factor to the growing security problem is a lack of education, training, and awareness. In addition, "bring your own device" (BYOD) policies often leave security responsibilities to the competencies of device owners, which compromises security. Today's students are tomorrow's employees with responsibilities for protecting their work environment. They need to understand and practice a full-range of mobile security practices so that they can safely access the information assets of their organizations. If students are not engaging in such practices, educational institutions have a responsibility to ensure that students understand how to keep information assets secure. This paper investigates the smartphone security practices of undergraduate college students. Five hundred students in business classes at a regional public university were surveyed to determine their use of recommended smartphone security practices. The study found that many smartphone users did employ some security measures, but a high percentage of them were ignoring potential risks. This suggests a need for increased education, training, and awareness.