All right, enterprise, mobile, device,
security risks and challenges.
All right, security risks, use of mobile
devices create a new set of security risks and challenges.
Enterprise mobile device, additional security challenges, besides security
risks that include weak security systems and insufficient configuration.
The biggest issue is the configuration support, really.
There's a lot of wireless
access, a lot of careless application installation, things like that.
Mobile devices are also moving targets, can be used outside the organization and
its security system, defeating the purpose of presenting security attacks.
Organizations allow mobile devices in the workplace.
They can also be used for internal reconnaissance, information gathering.
Security challenges.
Mobile devices are harder to track and secure.
Portable enough, they can be easily lost or stolen.
That's a big one.
It's difficult to ensure that mobile patches and security settings are updated.
That's where MDM comes in, Mobile device management.
Risk associated with BYOD, CYOD, COPE, and COVO.
Sharing confidential data on unsecured networks.
What is the employee doing with this device outside of working hours?
Data leakage and endpoint security issues,
improperly disposing of devices without wiping them.
Supporting various devices, again, just
the range of devices to support, mixing personal and private data, lost or stolen,
which goes along with improper disposing, lack of awareness, ability to bypass
network policy rules of the organization, infrastructure support, and
discrepancy, run with employees, which is always a huge issue.
The unhappy employee might decide they want to take a little revenge.
Our security guidelines.
For security professional, educate employees, use encrypted channels, control
access, that you read through all the bullet points in these laundry lists here.
For the employee, use encryption, clear separation between business and personal
data, remote locate and wipe facility if the company policy permits.
Absolutely.
Regularly update the device, latest OSes and patches, use antivirus, data loss
prevention, strong pass code we've already talked about, and then setting passes for
apps to restrict others from accessing them.