Bluebox: Ushering in a New Era in Mobile Data Security

Transcription

1 Securing mobile data wherever it goes WHITEPAPER Bluebox: Ushering in a New Era in Mobile Data Security The world is changing. By 2016, the number of smartphones is expected to surpass the number of people on the planet. Increasingly, employees use their personal phones and tablets for work activities, blurring the lines between work and personal use. By 2015, smartphones and tablets will be used by more than 92 percent of the workforce for performing work-related activities and tasks. SOURCE: VENTANA RESEARCH, FEBRUARY Thanks to the explosion in cloud and mobile technologies, employees are conducting business from anywhere, at anytime, forever changing the computing landscape. With cloud technologies, your enterprise may increasingly be using apps such as Salesforce.com to manage customer relationship data, Dropbox or Box for file sharing and collaboration, or Workday for human resources. With corporate data in the cloud, servers are no longer within your direct management. And with mobile computing enabling workers to access this data from mobile devices, enterprise security finds itself scrambling to reduce risk and prevent security breeches. As the consumerization of mobile continues to shove BYOD into the enterprise, the number of applications in use is growing exponentially. Organizations must get a better handle on just how much risk is accumulating from the proliferation of mobile apps on their user's devices Similar to many enterprises, you may be struggling to understand the risks and privacy implications of mobility. Despite the growth of bring-your-own-device (BYOD), only 43 percent of organizations have implemented a formal policy for it, according to a Global State of Information Security Survey by PWC in Gartner warns that 20 percent of current enterprise BYOD programs will fail by 2016 because of very restrictive deployment measures causing employees to circumvent the rules. Today s mobile worker is more empowered and demanding, than ever before. While protecting the enter-

2 prise remains the top priority for the CISO, their strategy now requires incorporating the employee s needs for productivity, usability, and respect for privacy. Recognizing the importance of productivity, usability, and privacy, Bluebox developed a next generation mobile data security solution. Developed in consultation with F500 CISOs and employees alike, Bluebox s solution has three goals: The end user doesn't want to care about security and privacy. They expect privacy to be 'taken care of' and to be provided as a natural right. To be successful, security products must be transparent and seamless." 2 Secure what matters most corporate data across devices, apps and networks Offer unprecedented visibility that helps tune and inform security policies and actions Get employees to embrace security, increasing compliance and productivity This white paper highlights the need for a new approach to enterprise mobile security one that provides seamless data visibility and protection by securing the data at rest or in transit in any app. With Bluebox, enterprises can trust mobile, and offer employees the freedom and privacy they need to be productive. Mobile Security The Early Days When mobile first emerged over a decade ago, fully managed devices authorized and issued by IT or CISOs were the norm. These devices offered corporate-sanctioned apps and select access to corporate data for mobile workers. In that era, mobile device management (MDM) was the prevailing security standard focused on managing the security and behavior of the physical device. This was an adequate solution when most workers were primarily using devices for and calendar. The world changed with the mobile app explosion (circa 2008), and suddenly mobile workers not only had multiple devices to choose from but thousands of productivity apps. This result was an explosion of corporate data being replicated and shared across different applications, beyond the control of IT. In response to this app explosion, mobile application management (MAM) and app containers arose. The focus of these solutions was on securing the app resting on a device by setting up separate, encrypted zones. These solutions were great for highly regulated enterprise environments, but in many cases, they added complexity and inconvenience, inhibiting the employees they set out to help. In other cases, these solutions focused on handling only a subset of apps that had to be specially modified for use, resulting in an additional expense for IT, and degrading the native user experience. In today's BYOD world, enterprises are often caught between the proverbial rock and a hard place. If security solutions aren't easy to use and non-disruptive, employees bypass the security altogether, undermining their effectiveness. Further, as enterprises expand into fully BYOD global workplaces to better compete in the market, current mobile solutions are falling short. Many people believe the current mobile security offerings are now legacy because they provide a desktop approach to a mobile platform, which is no longer relevant. While Enterprise Mobility Management (EMM) has emerged from the combination of MDM and MAM solutions, combining the best security benefits from each of the two worlds, MDM and MAM remain deficient from an end-user usability and privacy perspective and ensuring that the corporate data is protected wherever it goes. Ushering in a New Era in Mobile Data Security 2

3 The mobility mess will get worse for quite some time before it gets better. Consumerization and a general move toward cloud-based services will make more enterprise content web-accessible, providing further opportunities for end runs by mobile users. Additionally, the continued shift of purchasing authority from IT to lines of business will increase demand for consumer-quality interfaces and interactions, further complicating administration. GIGAOM SECTOR ROADMAP: ENTERPRISE MOBILITY MANAGEMENT, OCTOBER 2013 Enter Bluebox The Need for a Fresh Approach With these issues in mind, the Bluebox team looked at current approaches to mobile security, and found two fundamental flaws: First, the technology and the methodologies had a limited perspective, focusing too much on gaining control of the device or providing too limited a view of the app, and ultimately failing to protect corporate data. Second, while the employee is critical to the success of any security solution, employee needs were rarely, if at all, taken into consideration in the design and implementation of most mobile security solutions. In designing its mobile data security solution, Bluebox turned these perspectives on their head. Instead of focusing on the device, then the app, Bluebox approaches mobile security from the standpoint of the data, then the employee. Under this model, CISOs get visibility and security for their corporate mobile data wherever it goes whether it is at rest, or in transit, in any app. With confidence that their data is protected, enterprises can respect the privacy rights of the individual and allow employees to use whatever app they want, without compromising security. It s mobile data security that both enterprises and employees can embrace. User Data Network Others App Device Ushering in a New Era in Mobile Data Security 3

4 Here are the key tenets of the Bluebox solution: Secure What Matters Most With Bluebox, you can trust that your enterprise is protected by securing what really matters corporate data across devices, apps, and networks. Our solution identifies and dynamically encrypts corporate data on the device and in apps, and only allows files to be decrypted by Bluebox-secured apps. Bluebox even covers the last mile of data security, securing corporate data traffic end-to-end from devices as well as cloud based and internal applications. With configurable, context-aware policies across devices, apps and networks, Bluebox further allows you to dynamically safeguard your corporate data and prevent data leakage. Bluebox also goes beyond mere jailbreak/rooted detection with a full-fledged defense mechanism on the device that detects and protects against platform level vulnerabilities and app tampering. Gain Unprecedented Data Visibility With Bluebox, you can inform and tune your security policies and actions based on strategic insights from a repository of real-time data, app, and device use. Through our easy-to-use dashboard, your enterprise gets trending and drill-down analytics into the who, what, where, when and how of corporate data use and movement. You ll have intelligence on the most popular apps installed and used, know the top users, where your sensitive documents reside, and more. You can easily detect and analyze sensitive patterns in corporate data to track and better mange its use and location. With Bluebox s centralized administration console, IT is empowered to dynamically tune policies and respond to security events with surgical precision down to the individual document level. No matter where your organization sits today, or is evolving to tomorrow, across managed, BYOD, and hybrid environments, you can use the Bluebox console to ease and simplify on-going administration. Deliver Security Employees Embrace The Bluebox solution provides security that works the way employees do, eliminating friction and increasing employee compliance and productivity. Enrollment into Bluebox is as easy as downloading the Bluebox agent app from the Apple App Store and Google Play Store. Once enrolled, apps are pre-loaded on their device, can be selected from a list of recommended apps provided by IT, or, for complete autonomy and productivity, employees can select any free app from Apple App Store and Google Play Store. Bluebox delivers a secure version of any app on-demand, without sacrificing native UX or requiring SDKs. Furthermore, Bluebox s clear separation of corporate and personal data and apps enables a what s mine is mine and what s yours is yours approach respecting the privacy and work/life balance demanded by today s mobile worker. Corporate security controls such as suspend, lock and wipe only apply to corporate data so the personal use is never negatively impacted. A transparent privacy dashboard shows employees what IT is tracking, and just as important, what IT is not tracking. And employees are empowered to switch to personal mode as desired, reclaiming the phone for personal use and temporarily suspending access to corporate data and preserving enterprise security. Ushering in a New Era in Mobile Data Security 4

5 The Bluebox Approach Security that Enterprises and Employees Embrace The Bluebox solution is not about the device, or the app, it's about the 'data securing mobile data wherever it goes. It s also about making the employee experience seamless, providing freedom of choice, and respecting privacy to ensure maximum adoption and utilization. In short, the Bluebox solution serves two masters. For the enterprise it delivers: Unprecedented visibility into data movement to ensure security policies and actions stay relevant to current mobile data use Security of mobile data across devices, apps, and networks A solution employees can embrace, increasing corporate compliance and productivity And for the employee it provides: Freedom to use any app, without compromising security, to maximize productivity. A native user experience, providing ease of use and enhanced productivity. Privacy and separation of work and personal workspaces. Rethink Your Mobile Strategy Bluebox Security is the first mobile data security solution providing seamless data visibility and protection by securing data at rest or in transit in any app. With Bluebox, you can trust your enterprise is protected in mobile and offer employees the freedom and privacy they need to be productive. Whether your company is currently fully managed, completely embracing BYOD, or somewhere in-between, Bluebox can help you rethink your approach to mobile security. 1 Blog post "Mobile Application Security Maturity - Leveling Up," Tyler Shields, Forrester Research, Inc., August 13, < 2 Blog post, "Just Let Me Fling Birds At Pigs Already! Thoughts On The Snowden/Angry Birds Revelations," Tyler Shields, Forrester Research, Inc., January 28, About Bluebox Security Founded in 2012 by a team of security experts, Bluebox Security offers the first mobile data security solution to safeguard corporate data across the device, application, and network. The cloud-based solution provides complete visibility and security of corporate data, while providing employees the freedom, ease of use, and privacy that ensures widespread adoption. Learn more about how to secure your mobile data wherever it goes, visit or call for more details. Bluebox Security 171 2nd Street, Suite 400 San Francisco, CA twitter.com/blueboxsec 2014 Bluebox All rights reserved.