5 Considerations for a Successful BYOD Strategy Vincent Vanbiervliet

Transcription

1 5 Considerations for a Successful BYOD Strategy Vincent Vanbiervliet Sr. Sales Engineer 1

2 What we ll talk about What is BYOD? Mobile Revolution, the Post PC era? BYOD: What to consider 1. Users 2. Devices 3. Apps 4. Infrastructure 5. Security Choosing a BYOD solution Q&A 2

3 What is BYOD? Personal smartphones, tablets, etc. being used at work Define what BYOD means for you Consumerization of IT? There are probably no two organizations where When employees pay for their own it means exactly devices and plans the same Bring Your Own Technology 3

4 The mobile revolution 4

5 The big shift million devices billion devices Source: Kleiner, Perkins, Caufield, Byers, Dec

6 The Post-PC era? Not yet. 5% BUT PCs are evolving - New interfaces 29% 66% - New form factors Data source: ZDNet Photo source: Fujitsu 6

7 The multi-device user 1.96 mobile devices used for work in 2012 ipass Mobile Workforce Report, 2012 (Tablets, smartphones and mobile phones) 7

8 All work and no play Smartphones and tablets add 2 hours to the working day Source: Pixmania Study, telegraph.co.uk , Photo: Getty Images 8

9 BYOD: 5 Considerations 9

10 BYOD: The new IT challenge New challenges for IT departments Device Diversity Mixed ownership Network access Compliance & security IT productivity IT needs tools to control devices Many different apps Enterprise vs. Personal Apps User is the admin 10

11 1. Users 11

12 Users have different needs My smartphone is my lifeline I am IT! I need mobile access to my sales data ipads are great for presenting 12

13 Know your users IT Sales Office staff Remote workers Smartphone Tablet Work remote Manager PC/Notebook Devices/user 100% 100% 20% 100% 50% 70% 10% 50% 30% 80% 10% 100% 5% 10% 15% 0% 100% 100% 100% 100%

14 2. Devices 14

15 User devices User-owned devices - What happens in case of loss or theft? - Can you wipe the device? - What can you enforce? - Can you block applications? - How can you ensure data security? 15

16 Narrowing down Look at experience in IT Compare OS functionality Decide which platforms Define minimum OS version Device model restrictions? Device type restrictions? 16

17 The Acceptable Use Policy Scope Which devices does it cover? Corporate and personal devices Technical Requirements Minimum OS Encryption Password Anti-malware protection User Requirements What happens when Back up of personal data 17

18 3. Apps 18

19 All about apps Potential risk from apps Third-party app stores Which workflows put sensitive data on personal devices? What regulations apply to your region/industry? How can apps benefit the mobile user? Promote collaboration with supported tools 19

20 Mobile Application Management Distribute in-house apps Link to app store or upload Blacklist/Whitelist apps Enterprise App Store Deploy apps to devices Manage volume purchases ios Managed Apps View installed apps 20

21 Secure collaboration, e.g. cloud 64% of people think cloud storage is risky but 45% still go right ahead and use it. Sophos InfoSec Survey, 2012 The solution: End-to-end encryption Cloud Storage Notebook Mobile Device 21

22 4. Infrastructure 22

23 Resources for BYOD Personnel IT staff or dedicated resources Decentralized management Experience available On premise solution, SaaS or Managed Service Network infrastructure WiFi set up Connecting remote workers Mobile access to internal systems Stay productive 23

24 Priority for business Application Control Next Generation Firewall Real-time reports Completely block or allow applications Allocate bandwidth and prioritize by shaping traffic to requirements Monitoring and reporting history 24

25 Hotspot guest access Provide controlled and limited access Managed, temporary Internet access for guests and others Ticket management Password of the day Volume-based Time-based 25

26 5. Security 26

27 Widespread lack of awareness 89% = unaware 67% = unsecured 65% = unbothered 27

28 Explosion of Android Malware No. of Android malware samples discovered each year

29 Security threats BYOD An unsecured device means unsecured data o You can insure your devices but what is your data worth? MDM helps enforce controls such as password, lock, etc. o If you re not sure, you re not secure Protect Android devices with anti-malware protection o Users can remove protection, so needs to be enforced Malicious websites can also target mobile users o Apply web protection to keep web threats at bay 29

30 Keep malware at bay Free Managed 30

31 5 Considerations for BYOD 1. Users 2. Devices 3. Apps 4. Infrastructure 5. Security 31

32 Choosing an MDM solution Choose a flexible solution Ensure it can grow with you Look at security options Look at licensing Don t bite off more than you can chew 32

33 Checklist for your BYOD solution MDM Buyers Guide (registration required) 33

34 And what about costs? 1 user 2 devices 2 licenses Better option 1 user 2 devices 1 license 34

35 Additional resources Mobile Security Toolkit MDM Buyers Guide Free Android Security App Free Trial - Endpoint, mobile, data and web security licensed by the user, not the device 35

36 Complete Security Network Protection EndUser Protection Server Protection Reduce attack surface Protect everywhere Stop attacks and breaches Keep people working URL Filtering Web Application Firewall Endpoint Web Protection Encryption for cloud Data Control Access control Automation WiFi security Anti-spam Patch Manager Mobile Control Virtualization Anti-malware User education Visibility Local self-help Device Control Application Control Secure branch offices Mobile app security Intrusion prevention Firewall Clean up Technical support Encryption Tamper protection Free Home use VPN encryption Live Protection Performance Small updates 36

37 Questions? 37

38 Sophos Ltd. All rights reserved. 38