Enterprise Mobility & BYOD: Four Biggest Challenges And How to Solve Them WHITE PAPER

Transcription

1 Enterprise Mobility & BYOD: Four Biggest Challenges And How to Solve Them WHITE PAPER

2 WHITE PAPER 2 Enterprise Mobility & BYOD: Four Biggest Challenges And How to Solve Them Business success is highly dependent on an organization s ability to empower its mobile workforce. Corporate resources including applications, data, and services must be securely and reliably accessible by every device employed to perform business tasks, regardless of whether it is owned by the business or by an employee. Driven by the mobile workforce, Bring Your Own Device (BYOD) has become the norm, as people continue to expand their use of personal devices to get their jobs done. According to market analyst Enterprise Management Associates (EMA), currently 58 percent of business smartphones are purchased by the user, not the employer and this number is growing to 85% in In addition to smartphones, tablets and superlight laptop-oriented devices such as the MacBoook Air, 29% Laptop Google Chromebooks, and other ultralight laptops are increasingly used by 71% 58% employees for combined personal and Tablet 42% business purposes. With BYOD comes the expectation of anytime, anywhere access to corporate applications and information without compromising access to personal data. Smartphone User-purchased This 24/7 expectation across a multitude Client Device Ownership of devices creates significant challenges for IT teams. They must figure out how to maintain data and network security, while providing support for a plethora of applications and tools that people need access to. It must also be noted that BYOD policies are just as applicable to business-owned devices and Choose Your Own Device (CYOD) concepts as they are to employee-owned devices. 90% of all devices are utilized today to perform both business and personal tasks, so a service that allows secure business resources by segmenting them from a user s unsecured applications and data is vital in either scenario. Enterprise Mobility Management solutions can help IT organizations with the challenges and security concerns that arise with the BYOD movement. We have identified four key challenges and their solutions to creating a successful Enterprise Mobility strategy. Read on to learn how to get started with BYOD, support employees on multiple endpoints, maximize security, and provide employees with time saving self-service tools. 43% Supplied by employer 57% EMA: Supporting Workforce Mobility: Best Practices in Enterprise Mobility Management, October 2013.

3 WHITE PAPER 3 CHALLENGE #1: DEFINING COMPANY-SPECIFIC MOBILITY BEST PRACTICES AND POLICIES Every business is different, and no two Mobility strategies will be identical. It s important to understand your organization s expectations before you start to craft a BYOD plan. Begin by identifying the mobile use cases that will help your organization be more successful and that can accelerate your business. You need to be specific in defining the enterprise mobility guidelines and policies that are right for your organization. Determine the information and applications that each department in your organization will need access to. Outline the security procedures that are important to each of your business units. Understand the regulations governing data usage and data access in the countries you operate in. Look into your specific data usage requirements, and any regulatory or compliance requirements. Once an understanding of internal policies and future requirements is in place, you can draft the Enterprise Mobility and BYOD policy framework for your organization. Make sure you coordinate with your legal department to learn the impact of privacy regulations. CHALLENGE #2: SUPPORTING EMPLOYEES ON MULTIPLE ENDPOINTS In addition to understanding your organizational and security requirements, IT organizations need to understand their users, where and how they are accessing corporate information and resources, and what devices they are using. According to EMA research, 87% of all business professionals employ a PC (laptop or desktop) and either a smartphone or tablet (or both). It is unquestionable that today s enterprise workforce is dependent on multiple devices. 2 The biggest impact of mobile devices on IT support, however, is not the volume of devices, but the style of support that is necessary. BYOD limits the scope of service IT is required to provide, and, in turn, puts more of the responsibility on the end user. IT can often provide only best effort support. Second, the high degree of heterogeneity of mobile devices (i.e., ios, Android, Windows Phone, etc.) and their high rate of change limits the breadth of platform expertise the IT staff can realistically possess. Most IT organizations are not adding more support staff in response to increased demand driven by mobility. EMA: Supporting Workforce Mobility: Best Practices in Enterprise Mobility Management, October 2013.

4 WHITE PAPER 4 Mobile platforms, by design, put more control in the hands of the user. If the user owns the device, IT cannot push changes and configurations automatically. The end user plays an active role in the process. Some updates and configurations will be more critical than others, and thus the mechanisms that enforce compliance must vary. Critical OS updates should motivate the user to urgently comply, for example, by revoking access until compliance is achieved. Noncritical policy violations may simply be addressed by prompting the end user to comply. You will need to create policies to define which types or models of devices you will support and determine the extent your IT will provide technical support for these devices. CHALLENGE #3: MAXIMIZING SECURITY BYOD poses many security risks, but there are steps businesses can take to alleviate them. Inevitably, device loss and/or theft will occur. Analyst EMA found that on average, one out of every eight mobile devices will be lost or stolen. Be sure your business has policies in place for device replacement, as well as a security protocol for protecting stolen data. Security policies must be established and enforced on all devices that access business resources. Of particular focus should be processes that support Data Loss Prevention (DLP). All enterprise data, regardless of sensitivity, should be secured at its source, in transit to the user device, and on the endpoint. Make sure your IT department has the ability to remotely wipe all mobile devices used by employees, ensuring that sensitive data doesn t fall into the wrong hands. Remote backup and restore functionality can help decrease the risk of data loss, and device location services can help users locate their lost device without having to contact IT. Employee-owned devices sometimes bypass inbound corporate filters, leaving them vulnerable to malware. Adding security layers to mobile devices can help prevent this, but expect pushback from users. As always, be sure to consider legal privacy requirements before instituting security policies for personal devices.

5 WHITE PAPER 5 However, regardless of how well these DLP methods are implemented, it is important to realize that users can fully circumvent security restrictions by rooting or jailbreaking their devices. To maximize security, it is recommended that all rooted or jailbroken devices be monitored for and disallowed access to business resources. Secure data access Device security Secure BYOD support Secure apps Security Best Practices Antivirus protection CHALLENGE #4: EMPOWER EMPLOYEES WITH SELF-SERVICE The shift toward personal device ownership and the consumer nature of mobile platforms naturally enhances the necessity of self-support and a long-term goal of enabling selfsufficiency. Self-sufficiency is a strategy that provides users with the tools and information to progress their ability to help themselves, rather than traditional forms of self-service that focus on just providing answers to common questions. End users should have the ability to provision their own devices with little or no interaction with IT operations. This prevents IT from becoming overwhelmed by service requests for the flood of personal devices entering the organization. A consolidated application delivery system, such as a mobile AppStore, can provide a one-stop shop experience for accessing all business applications, virtual applications, and web applications. Similarly, data can be stored and distributed via a secure share or other centralized and commonly-accessed repository. All provisioning procedures should include approval and authentication processes to ensure resources are only accessed by authorized personnel.

6 WHITE PAPER 6 Although EMM places endpoint device control principally in the hands of the end users, sometimes difficulties occur that require administrative assistance. Users should have the ability to easily initiate a service request and provide all details of the incident for support personnel to understand the problem. Since users have a wide range of technical abilities, it is often not practical for administrators to talk them through a problem resolution (particularly if the device they are having problems with is the smartphone they are talking on). To simplify this process and enable prompt problem resolution, administrators should have remote access to all supported endpoints, allowing them to see and resolve any issues. In the event a device is damaged beyond repair, all business data on it should be backed up and easily recoverable. COMPLETE ENDPOINT CONTROL WITH ENTERPRISE MOBILITY MANAGEMENT Enterprise Mobility Management (EMM) solutions such as FrontRange HEAT Client Management are very helpful in initiating and maintaining strong, effective mobile policies. FrontRange HEAT Client Management is the most affordable, flexible, and complete enterprise mobility management solution available. It s designed to help you overcome the security challenges of BYOD while delivering the mobile services your employees demand, faster and easier. HEAT offers complete endpoint control over all mobile as well as physical and virtual devices that come into the environment, planned or unplanned. From a single solution, IT can provision, update, secure, and support every device on the network, maximizing security while providing users with more and better services. FrontRange HEAT Client Management features security policy enforcement, over-the-air troubleshooting, and backup/restore/data migration features, maximizing IT s ability to solve security issues without restricting user mobility. Plus, powerful remote management tools give IT the control they desire and make diagnostics and troubleshooting a snap. The HEAT solution enables end-user self-care, empowering employees while taking some of the management burden off of IT. The corporate AppStore can give users access to ITapproved applications that increase device efficiency and performance.

7 WHITE PAPER 7 User-initiated remote device lock, data wipe, and backup/restore features give employees even more control. And device location services help users find lost devices without having to call IT. HEAT Client Management provides IT with an efficient EMM solution and the endpoint control they need, while allowing employees the mobile freedom they desire. Asset Lifecycle Management Resource Positioning Security and Compliance Problem Management Heterogeneous support (mobile and PC platforms) Operating system provisioning and updating Security policy enforcement Real-time status views, reports, and alarms Endpoint detection Patching Malware protection Remote troubleshooting Consolidated asset inventory and tracking Application provisioning Lock and wipe Backup and restore Configuration management Application black & white listing Location detection Data access management Containerization Encryption HEAT Client Management Solution Supporting EMM Requirements Learn more about how FrontRange HEAT can help maximize your mobility strategy today. Get started More Information Copyright 2014 FrontRange Solutions USA Inc. All Rights Reserved. GoldMine, HEAT, Enteo and other FrontRange Solutions products, brands and trademarks are property of FrontRange Solutions USA Inc. and/or its affiliates in the United States and/or other countries. Other products, brands and trademarks are property of their respective owners/companies. Corporate Headquarters FrontRange Solutions Inc. 490 N. McCarthy Blvd. Milpitas, CA USA T: and W: FrontRange Solutions USA Inc. All Rights Reserved.