My first topic which related to designing a system for online delivery of technical subjects was killed by the panel as being more education related than engineering. Dr. Mazzuchi suggested picking a topic in Information Systems Security Policy Management.
I decided to go for Mobile Security Policy Management. Initially I defined "Mobile" as laptops, notebooks, tablets, and smartphones but have since decided to limit it to tablets and smartphones. My topic is to analyze why mobile security is an after thought to the overall security in most organizations. In other words, mobile security is not integrated in the overall security policy of most organizations (if any) and is generally band-aided later on. Further, mobile app security is not an integrated part of mobile app development. My goal is to identify such shortcomings and propose a framework for integrating mobile security through out the overall security policy of an enterprise for a more complete security policy management.
By: Nima Zahadat
