FiberLink. (2012). Mobile Device Management (MDM) Policies (Best Practice Guide). In MaaS360 (Ed.), (pp. 1-14): Fiberlink.
Interesting paper, more of an informational and a sales pamphlet. IT is good though as it clearly highlights what they consider mobile security issues all of which interesting they have solutions for.
Some interesting pieces:
- Best practices listed
- Know your industry's regualtions
- Require passcodes
- Enforce encryption
- Restrict device features as necessary
- Keep a watchful eye on apps
- Use TouchDown (their product which only works on Android) for setting up email
- Distribute settings over the air
- Warn first, then remediate policy violations
- Test your policies
- Monitor your devices
- Sales pitch: MaaS will watch over your devices both BYOD and company issued
- Setup as policies as to treat all users the same way (not practical in real world but makes for easier software development)
- Setup passcode expiration
- Sales pitch: with a few clicks you can make your passcode policy a reality
- Apple supports native encryption; Android does not necessarily and may need additional software
- Their recommendations: prevent any devices that cannot be encrypted from connecting to your corporate resources
- While it is a reasonable recommendation, they don't mention how to do this and further, how to block someone from doing this if they are coming in over the telephone network and not Wi-Fi
- Looking at some of their screenshots, one says: "Supported only on iOS 5 and higher"
- What if someone has iOS 4? Can they bypass the security?
- Some of their customers require the same apps so employees can collaborate together
- For remediating policy violations, they recommend that it be automated without IT having to learn of the problem and then take action
- This may be fine for small violations but not practical for very secure environments
- Create test scenarios with groups of test users prior to deployment
No comments:
Post a Comment