READ: Security Requirements of a Mobile Device Management System

CITATION
Rhee, K., Won, D., Jang, S.-W., Chae, S., & Park, S. (2013). Threat modeling of a mobile device management system for secure smart work. Electronic Commerce Research, 1-14.

Good paper, though quite high level.  The authors acknowledge that "...no criteria have been established as of yet to evaluate whether such Mobile Device Management systems correctly provide the basic security functions needed by enterprises and whether such functions have been securely developed".  The paper is from April 2012 so quite recent even by technology measure.  Some good points:

• MDMs should manage not only the data stored on BYOD but also the hardware such as USB ports and cameras
• MDMs sould be flexible to employees, developers, and administrators

A MDM should follow five steps it is suggested:

1.  Enrollment/Configuration
2. Distribution
3. Authentication
4. Instructions
5. Control/Report

A good list of Threats and Security Objectives is included.  Also a table of Security Functional Requirements is provided.  Lots of references at the end which I will look into.

By: Nima Zahadat