Follow Us - Get Exclusive
Premium White Papers

Follow Us TwitterFollow Us FacebookFollowu Us BlogJanco RSS Feed


Buffer

Bookmark
Del.icio.usFacebookCIO Daily


Security Topics

How to Justify Security Spending
How to Implement Security
ISO Domains & Security Manual Template
ISO 27008:2011
FIPS 199
Top 10 Security Myths
Security Issue Trends
Security Management
BYOD
BYOD Security Best Practices
Common User Passwords
User Security Holes
Passwords
Top Network
Security Weaknesses

Malware Impact On Security
Steps to Detect and Prevent Security Breaches
Insider Data Security Issues
What is HIPAA
SmartPhone & Tablet Security
Digital Copier Risk
Mobile Device Security

Security ManualSmartPhone and Tablet Security

Order Security ManualSample DRP

Smartphones and tablets have changed the way we work, so no longer are employees slaves to their desks. These PDA/cell phone combos help employees at all levels within the organization stay in touch with the office, get work done on the road, check e-mail, obtain news, and more.

Despite their overwhelming presence in today’s society, smartphones and tablets perpetually straddle the line between modern convenience and disruptive nuisance. The phone calls, text messages, pictures and other data relayed to family members, friends, doctors, or even co-workers while on the job are the source of many interrupted business meetings or disgruntled employees, which is why creating a cell phone policy is key to preserving the (literal) peace of your workplace environment. So what security is required for these business users?

Security and use policy for mobile devices such as SmartPhone and tables should include the following:

  • Lock the device automatically after it is used
  • Implement a find-me application with GPS to locate lost devices
  • Implement a self-destruct process both remotely and when the authentication fails after x tries
  • Implement a mobile anti-virus for the device -- do not depend on the host e-mail server to do it for you
  • Implement a multi-factor user authentication process -- manage the identity of the user with the same level of security as if they were on a laptop accessing your network
  • Use applictions like Google Apps to manage the security policies
  • Implement Mobile Device Management - encrypt data in motion, remotely enforce application password policies, remotely wipe enterprise data off of devices, partitation sensitive data and set role-based access rights.
  • Establish enterprise infrastructure policies - define the versions of OS, software, and application that will be supported
  • Integrate and secure email - limit person use of corporate email accounts and do not let users merge personal and private email.
  • Define and enforce records management policies including back and recovery
Order Security ManualTable of ContentsVersion History