Centralized process and procedure of managing mobile devices and how they connect and interact on the network - complete control over each device - can force security procedures
.
Apps are constantly being created and updated and present major security concerns - sometimes use a whitelist to manage what apps can be added
.
Policy to control how data is added and moved around on the device - Inside the network (like Sharepoint) and outside in the cloud (One Drive, Dropbox, etc)
.
Administrator must be able to delete all information from each remote device via the MDM in case it's lost
.
Tracking a device (such as with "Find my iPhone") can be a security risk, but MDM likes to know exactly where it is so it's usually enabled
.
Locking certain activities or app uses to certain geographical locations
.
MDM can control this procedure so the screen isn't available or will send alerts or lock it; MDM can control the passcode requirements
.
Information that simply appears on the screen with no action from the user; MDM can manage this
.
A form of authentication, but not very secure on mobile; in some environments it's forbidden; can be managed per app
.
Goes beyond 2 factor, that looks for other types of access such as IP address matching, GPS locating, set of expected bluetooth devices, etc.
.
Implement this if the device is used for both the corporate environment as well as home environment so that the data is kept separate - only a section of the pc is for corporate use
.
All data is protected in case it's lost - can set levels of strength and make sure MDM is backing up keys because if locked out, no getting back in
.
|
