The ABC s of mobile device management

Transcription

1 IBM Security Thought Leadership White Paper The ABC s of mobile device management Essentials for your organization s first MDM deployment

2 The ABC s of mobile device management A is for Android, fragmentation is scary Hundreds of models, multiple carriers, OSs from Gingerbread to Marshmallow and other delectable desserts Android fragmentation is scary for IT, but it s far from a problem with Mobile Device Management (MDM). If you can control the minimum OS, turn off feature security holes, and force encryption, Android can go from scary to OK to carry. B is for BYOD, you can t control what they carry Bring Your Own Device is simple in concept, but for IT the concept is suspect. The mobile workforce expects to use personal smartphones and tablets for work and play and with Mobile Device Management, concerns about security generally fade away. C is for Cloud, used for each device In a world where new device types and software updates are announced at unprecedented rates, cloud-based MDM deployments have become the linchpin of mobile security success in the modern enterprise. Cloud gives you instant-on, launch day updates, lower total cost of ownership, and elastic scalability. It s time to think literally out of the box. D is for Documents, securely shared which is nice Sharing documents on mobile devices is simple; securely sharing documents becomes a bit trickier. Consumer apps like Dropbox have their place, but not in business. You need a document management solution that helps ensure corporate information is protected, while providing employees a simple way to access up-to-date documents on-the-go from their mobile devices. E is for Enrollment, made simple and fast IT knows the benefits of leveraging MDM; users maybe not so much. If you make MDM enrollment simple - one-click simple users will want to enroll their devices, many gladly, to gain access to network resources. F is for Free! Check out a 30-day no cost trial of IBM MaaS360 at last! Do you buy a car before you take a test drive, or a house before a walk-thru? Your MDM service should be just as transparent. Vendors who don t offer a preview are probably hiding something. Ask for 30 days free, you deserve it. It takes just minutes to start your no charge trial of MaaS360 at ibm.com/ maas360. G is for Getting your and Wi-Fi Mobility should simplify life, not make it harder. Employees don t want to think about connecting to resources, they simply want to be connected. With Mobile Device Management you can configure devices to safely access the resources they need when they need them. H is for Help, which is not needed with an intuitive UI Mobile Device Management isn t just about users, it s about simplifying IT s life as well. Some solutions require complex setups with user guides that rival the page count of War & Peace. The right Mobile Device Management solution can be robust without being complicated. Look for streamlined workflows with a simple, clear interface that automates timeand resource-intensive MDM tasks. ios is the Apple of many an eye The ios mobile platform comes with some of the best security features for the enterprise, with its native encryption, strong MDM APIs, and curated app store. However, for further control like over-the-air configuration, security policy management, and sharing apps and docs, Mobile Device Management is generally the only answer. Jailbroken devices can make IT cry Despite the wonderful out-of-the-box features of Apple ios, some users look for more control by Jailbreaking or hacking the OS. Flexibility comes with a price though, and that price is malware. Detect and block these security sieves with Mobile Device Management. 2

3 IBM Security K is for Knowing each mobile expense As connectivity gets faster, employees will begin to stream more content. That s perfect if they are on their own data plan, but less than perfect if the company is footing the bill. And let s not even begin to talk about the tall tallies from roaming. Stay on top of expenses and create policies within your MDM solution to control data usage heading for the stratosphere. Locate your devices don t make IT tense The tinier devices get, the easier they can get lost. All hope is not lost though, nor does it mean IT has to spend all day playing Sherlock Holmes trying to track devices down. With Mobile Device Management, employees can start the hunt from their own self-service portal, complete with integrated maps that will show with pinpoint accuracy where the device resides. Mobile Device Management surely a must While there are native applications that can do the basics of Mobile Device Management, only a true MDM solution can make IT s life easier. Over-the-Air configuration, full and selective wipe, app management, secure document sharing, and safeguards for privacy of employee data are the hallmarks of true MDM. New OS improvements you can t always trust It seems like every day there s a new OS update for the popular mobile platforms. While users might be infatuated with these new bells and whistles, IT knows the havoc they can wreak behind the scenes. Mobile Device Management lets you block devices that fall out of the corporate standard and allows for continuous communication to tell employees it s time to roll back. Over-the-air is the way to configure Mobile devices freed communications to an on-the-go activity, so why should management of the devices be any different? If employees have to bring a device to IT for enrollment or configuration, you re doing something wrong. True MDM works wherever IT and users need it to. Privacy issues keep getting bigger Even before the proliferation of Bring Your Own Device, employees have usually had concerns with IT playing the role of Big Brother. With Mobile Device Management corporate security professionals can create policies to restrict what IT does and does not see. Q is for Quickness, the cloud s totally rad On-premises is so 90s. Why spend weeks or even months deploying an on-premises Mobile Device Management solution, when cloud offers the same security and control without the added costs and complexities of deploying hardware and software, and dedicating additional resources to support the solution on an ongoing basis? R is for RIM, Blackberry isn t so bad BlackBerry has taken a lot of lumps recently, but there s no denying the devotion to BlackBerry for giving us one of the most popular apps: . Still, time marches on and people want options. If you find yourself with one foot in BlackBerry and the other in Android and ios, you will need an MDM solution to manage them from a single console, look no further than MaaS360 to manage all three platforms from a single console. S is for Self-service, teach employees to fish IT shouldn t have to handle each mobile issue, and with Mobile Device Management they do not have to. Simple functions like resetting passwords, finding out where the device might have been left behind (usually at home) and checking data usage can all be handled through Mobile Device Management self-service portals. T is for Time, MDM grants your wish Not only can you be up and running with cloud-based Mobile Device Management in mere minutes, the time savings continue once the solution is in place. Over-the-air enrollment and management, doc distribution and app control can save countless hours in productivity for users and give IT time to focus on higher value activities for the organization. 3

4 The ABC s of mobile device management Understand your employees and devices they own You can t protect what you don t know about. Smartphones and tablets make connecting to your servers a snap for users without any IT intervention. Ask yourself how many devices are connected to your corporate systems and then check. Chances are the number will be much higher than expected. With MDM, you can find out who is connected where. VPP: buy apps in bulk, the value is known Apple s Volume Purchasing Program (VPP) enables you to purchase publicly available apps or specifically developed thirdparty apps in bulk. MDM integrates with Apple s VPP for order management and tracking of volume purchases, distribution of application redemption codes and licenses, application installation and compliance monitoring. And one of the best benefits is not needing to track VPP purchases on a sticky note. W is for Wiping, corporate data or all People love their phones, but it s generally not the hardware that sets our hearts aflutter it s the personal experience of apps, photos or your child s voice as your ringtone. No one wants these precious assets compromised. With the right MDM solution, personal and corporate don t cross streams, and when someone leaves the company you can wipe their corporate data with no loss to their true device value. X is for X-Ray, and other apps that enthrall Medicine, education, retail, finance and countless other industries have transformed the concept of apps from timewasters to time-enablers. Then there are other apps which have no place in a corporation. With MDM you can control the apps that make it to the device and the ones that should be left in the app store for after work. Y is for Youth, they expect mobile choices Gen Y and Millennials are flooding the work force and these digital natives live for their mobile devices. You don t want to tell this next generation of best and brightest workers they are constrained to the old ways of business and communicating. Say yes to the devices they know best and reap the rewards. Z is for Zeal, you should hear happy voices Users and IT rejoice when mobility works seamlessly and is easy to manage. Mobile Device Management will evolve over the next few years, but it certainly won t go away. Start making your life and the lives of those you support easier now start managing mobility in minutes with MaaS360. About IBM MaaS360 IBM MaaS360 is the enterprise mobility management platform to enable productivity and data protection for the way people work. Thousands of organizations trust MaaS360 as the foundation for their mobility initiatives. MaaS360 delivers comprehensive management with strong security controls across users, devices, apps and content to support any mobile deployment. For more information on IBM MaaS360, and to start a no cost 30-day trial, visit About IBM Security IBM s security platform provides the security intelligence to help organizations holistically protect their people, data, applications and infrastructure. IBM offers solutions for identity and access management, security information and event management, database security, application development, risk management, endpoint management, next-generation intrusion protection and more. IBM operates one of the world s broadest security research and development, and delivery organizations. For more information, please visit 4

5 Copyright IBM Corporation 2016 IBM Corporation Software Group Route 100 Somers, NY Produced in the United States of America March 2016 IBM, the IBM logo, ibm.com, and X-Force are trademarks of International Business Machines Corp., registered in many jurisdictions worldwide. BYOD360, Cloud Extender, Control360, E360, Fiberlink, MaaS360, MaaS360 and device, MaaS360 PRO, MCM360, MDM360, MI360, Mobile Context Management, Mobile NAC, Mobile360, MaaS360 Productivity Suite, MaaS360 Secure Mobile Mail, MaaS360 Mobile Document Sync, MaaS360 Mobile Document Editor, and MaaS360 Content Suite, Simple. Secure. Mobility., Trusted Workplace, Visibility360, and We do IT in the Cloud. and device are trademarks or registered trademarks of Fiberlink Communications Corporation, an IBM Company. Other product and service names might be trademarks of IBM or other companies. A current list of IBM trademarks is available on the web at Copyright and trademark information at ibm.com/legal/copytrade.shtml Apple, iphone, ipad, ipod touch, and ios are registered trademarks or trademarks of Apple Inc., in the United States and other countries. This document is current as of the initial date of publication and may be changed by IBM at any time. Not all offerings are available in every country in which IBM operates. The performance data and client examples cited are presented for illustrative purposes only. Actual performance results may vary depending on the specific configurations and operating conditions. It is the user s responsibility to evaluate and verify the operation of any other products or programs with IBM product and programs. THE INFORMATION IN THIS DOCUMENT IS PROVIDED AS IS WITHOUT ANY WARRANTY, EXPRESS OR IMPLIED, INCLUDING WITHOUT ANY WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND ANY WARRANTY OR CONDITION OF NON-INFRINGEMENT. IBM products are warranted according to the terms and conditions of the agreements under which they are provided. The client is responsible for ensuring compliance with laws and regulations applicable to it. IBM does not provide legal advice or represent or warrant that its services or products will ensure that the client is in compliance with any law or regulation. Statements regarding IBM s future direction and intent are subject to change or withdrawal without notice, and represent goals and objectives only. Statement of Good Security Practices: IT system security involves protecting systems and information through prevention, detection and response to improper access from within and outside your enterprise. Improper access can result in information being altered, destroyed or misappropriated or can result in damage to or misuse of your systems, including to attack others. No IT system or product should be considered completely secure and no single product or security measure can be completely effective in preventing improper access. IBM systems and products are designed to be part of a comprehensive security approach, which will necessarily involve additional operational procedures, and may require other systems, products or services to be most effective. IBM does not warrant that systems and products are immune from the malicious or illegal conduct of any party. Please Recycle WGW03116-USEN-01