What ios 8 Means to the Enterprise

Transcription

1 What ios 8 Means to the Enterprise Version 1.0 MobileIron 415 East Middlefield Road Mountain View, CA USA Tel Fax globalsales@mobileiron.com MKT-6406

2 Table of Contents Executive Summary Introduction Why Every Company Needs a Mobile Strategy Privacy Protection is Critical Developing Enterprise Apps with ios 8 The Mobile Content Lifecycle Simplified IT Administration and Security 14 New MDM Controls Certificate Support for SSO Enhanced End-User Productivity Recommendations for Securely Enabling ios 8 Features Conclusion MobileIron. All rights reserved. 2

3 Executive Summary The release of ios 8 not only introduces a comprehensive list of features to enable greater enterprise mobility, it also highlights the pervasive need for an agile mobility strategy and EMM platform. According to a March 2014 study conducted by the Ponemon Institute, 50 percent of IT professionals in financial services say their company has no mobile strategy (1). Without a strategic approach to mobility and an EMM provider, organizations lack control over data security, end-user privacy, and mobile technologies that support corporate productivity. As ios 8 becomes widely adopted, it will impact other mobility trends such as the continued migration away from Blackberry. Enterprises will need to move quickly to address these challenges, so updating the mobile strategy should be a top priority in every IT organization. Maximizing the value and security of ios 8 requires every business to develop an agile mobile strategy that includes mobile guidelines for device privacy, application development, and content management. To help IT departments understand how ios 8 will impact their organizations, this white paper provides recommendations for three key management areas most affected by the new features: security, application development, and content publishing. First, every IT organization must place end-user privacy and data security at the forefront of its mobile strategy. This is especially critical due to the highly sensitive and confidential company and personal information contained in many of the new apps in ios 8. Selective management of apps and data, as well as protection and separation of personal and corporate data, are proven ways to secure confidential user information on either corporate- or employee-owned devices. Plus, these security approaches can reduce the enterprise s exposure to legal action and fines resulting from privacy or compliance violations. Second, ios 8 introduces new application development frameworks that open up many possibilities for new enterprise apps. However, these capabilities also require updated mobile app development guidelines to ensure new apps don t put corporate or personal data at risk. For example, ios 8 s new extensibility APIs introduce interapp communication that wasn t possible until now. To ensure that sensitive corporate data remains secure, IT should consider restricting how content can be shared between apps that use these APIs. Restrictions placed on managed and unmanaged apps can adequately containerize this feature without impacting the user experience. (Note: A managed app is one that is installed using ios MDM protocols, which is usually done through an enterprise app store or by pushing the app to a device. An unmanaged app is one that the user installs independently through Apple s App store.) Third, new content lifecycle management capabilities are designed to help end users easily and instantly obtain content relevant to their interests without having to conduct exhaustive searches. In ios 8, businesses can silently push and remove ebooks and PDF documents from the ibooks app using MDM tools a process that closely mirrors the app lifecycle. While the new publishing features offer a powerful way to simplify content management, they also require a new approach to managing and using content on mobile devices that differs dramatically from content management in the PC era MobileIron. All rights reserved. 3

4 ios 8 also builds on ios 7 with enhanced features that simplify IT administration and increase user productivity. Understanding these improvements is key to gaining the full business value of features such as new MDM controls and enhanced personal information management (PIM) apps. Although the new apps and features in ios 8 have been the focus of media hype since the release was first announced, the enterprise impact goes far beyond new knobs and switches. Maximizing the value and security of ios 8 requires every business to develop an agile mobile strategy that includes mobile guidelines for device privacy, application development, and content management. Introduction The release of ios 8 has introduced a truly impressive list of capabilities to simplify and enhance security, device management, app development, and enterprise content publishing. Additions such as 4,000 new developer APIs, enhanced PIM apps, and improved management features for devices, apps, and content show that, with ios 8, Apple means business. But the real enterprise impact of ios 8 is much broader than its new feature set. Along with productivity benefits, many of these features also introduce complex privacy, security, and device management concerns that can only be managed with a comprehensive mobile strategy based on clear guidelines and enabled through an EMM provider. ios 8 is already gaining widespread adoption, so now is the time to recruit expert staff to develop a readiness plan and modify company policies to handle privacy and data security as soon as possible. This white paper offers a starting point for mobility strategists and IT administrators who want to better understand what ios 8 means to the enterprise and how its newest features may impact mobile initiatives now and in the future. It also provides recommendations to address and resolve critical management challenges before they become problems MobileIron. All rights reserved. 4

5 Why Every Company Needs a Mobile Strategy The unprecedented rate of mobile adoption has dramatically shifted the enterprise IT landscape. Employees demand more flexibility over where and how they work, using a device of their choice. They want unrestricted access to personal and work apps from a single device, but due to the lack of a mobile strategy, many businesses have been slow to deploy corporate productivity apps on personal devices. With release of ios 8, the need for an enterprise mobile strategy is even more urgent because many of the new features could potentially complicate current mobile security and management efforts within IT. For example, new life-critical health and home apps in ios 8 will put highly sensitive personal data on mobile devices. Without adequate privacy controls and security measures in place, IT could inadvertently delete this vital data and put the user s personal health or security at risk. As a result, developing a mobility strategy with guidelines to support and secure these new mobile capabilities should be a top priority in every IT organization today. Privacy Protection is Critical Every CISO must understand the potential enterprise security impact of ios 8 s consumer features, many of which are designed to be deeply embedded in end users personal lives. Two new frameworks, HealthKit and HomeKit, enable the storage of highly sensitive personal data through multiple apps associated with them. Here s how they work, and why IT should start developing policies to manage them now: HealthKit and its mobile app, Health, are designed to help users keep better track of their health and fitness. The Health app provides an easyto-use dashboard where users can enter daily health metrics such as weight, calorie intake, hours of sleep, and minutes of exercise. It s easy to see how the app functionality could be extended to monitor life-critical conditions, such as blood pressure or blood sugar levels, as well as send reminders to take medication. Health can also share data with other health and fitness apps and allow healthcare providers to send and receive data from checkups, giving the user a more complete health profile. HomeKit is a home automation framework that allows users to control devices such as lights, doors, and security cameras through voice commands on their iphone. For example, when the user gets home from work, a single voice command could tell HomeKit to automatically open the garage, unlock the front door, and turn on the living room lights. At night, the user could tell HomeKit to get ready for bed, a command that automatically locks the doors, turns down the thermostat, and activates the home alarm and security camera MobileIron. All rights reserved. 5

6 Imagine a scenario in which an employee leaves the company (Figure 1). Her iphone is full of corporate productivity apps as well as personal data contained in her Health and HomeKit apps. Unaware of the consequences, IT performs a full wipe of all the data on the user s iphone, effectively erasing both corporate data and the user s critical personal information. However, there are proven methods IT can employ to help prevent irretrievable data loss and avoid the legal consequences of violating personal data: selective management and an end-user privacy policy. Selective management: IT should avoid performing global actions on a user s device that can compromise very personal data. Instead, IT can use selective management to separate business apps from personal apps and remove corporate access as needed all while maintaining the native experience end users expect. This enables IT to take actions on the device and secure corporate data and apps without completely wiping the device. Full device wipe End-user privacy policy and selective management Figure 1: Full device wipe vs. selective management 2014 MobileIron. All rights reserved. 6

7 End-user privacy policy: Few users believe their employers are willing and able to keep their personal information private, resulting in a trust gap between employees and the companies they work for. (See Figure 2) The fact is, few end users really know what kind of information their employer can see, so they tend to overestimate how much of their confidential information is exposed. To help close the trust gap, companies can provide more transparency into which types of data IT can and can t see on employee-owned devices. The privacy policy should be clear, brief, and enable users to quickly understand which information on the device is accessible to employers. (See Figure 2) Privacy in a this is a TRUST GAP between employees and the companies they work for. why? over of consumers are now using personal phones 80% and tablets for work. World only 30% completely trust their employer to keep personal information private. Employees are confused about what employers can and can t see on their mobile devices Communication is the way to bridge the Trust Gap We surveyed consumers in three markets and asked them: What would your employer need to do to increase your trust in their commitment to protecting your privacy when it comes to mobile data? Here s what they told us 33% 25% * Represents visibility on ios but will vary by mobile operating system and employer policy 30% Give me written notification about what they can see and what they cannot 28% 26% * Represents visibility on ios but will vary by mobile operating system and employer policy 28% Ask my permission in writing before accessing anything on my device 35% 24% * Represents visibility on ios but will vary by mobile operating system and employer policy 27% Promise in writing that they will only look at company information 41% 29% * Represents visibility on ios but will vary by mobile operating system and employer policy 32% Explain in detail the purpose of seeing certain information on my device 21% 36% * Represents visibility on ios but will vary by mobile operating system and employer policy 33% There is nothing they can do to increase my trust Figure 2: Source The MobileIron Trust Gap Survey (3) 2014 MobileIron. All rights reserved. 7

8 Developing Enterprise Apps with ios 8 The enterprise app market is expanding faster than ever, a trend that Apple perfectly sums up in the ios 8 tagline: Huge for developers. Massive for everyone else. The impressive set of developer features in ios 8, including 4,000 new APIs, clearly shows that ios 8 is designed to enable the development community to create more compelling and powerful apps. One of the most important features in ios 8 is Extensibility, which allows apps to share information and functionality between each other so users can spend less time switching between apps. For example, a user opens a file in App 1, but needs a watermarking feature from App 2. In this case, App 1 is used to make some minor edits to the file, and App 2 is used to add a company watermark and convert it into a PDF. Although App 2 adds a capability to modify the content in App 1, the file is not handed back and forth between the two apps. Instead, it is as if part of App 2 is running inside of App 1. As a final step, the user can post the new file and notify his social network by using ios 8 s new Share App Extension feature. APP 1 APP 1 1 Retrieve content 4 Share Content EDIT WATERMARK 2 Edit Content in App 1 APP 2 3 Modify Content in App 1 using functionality provided by App 2 Figure 3: Editing a document in one app with functionality from another app using Extensibility In another example, a user who prefers to use Photoshop Express to edit photos could use Extensibility to access those same editing tools right from within Apple s native Photos app. In this case, ios 8 could extend the editing tools from Photoshop Express to the Photos app, allowing the user to edit photos with the unique features of Photoshop Express without having to switch back and forth MobileIron. All rights reserved. 8

9 Extensibility includes six features: 1. Storage and Document Provider APIs: In ios 8, developer apps can now enable users to open and edit documents using more apps, share documents between apps, and avoid creating unnecessary copies. Storage Provider extensions provide a document storage location that can be accessed by other apps, such as icloud, Box, or Microsoft s OneDrive. Apps that use a document picker view controller can open files managed by the storage provider or move files into the storage provider. This simplifies document workflows on the device and extends the universe of readily accessible documents to more apps. Storage and Document Provider APIs Photo Editing Notification Center Figure 4: Six key capabilities of Extensibility in ios 8 APP Custom Keyboard Custom Actions Sharing Extensions 2. Custom Keyboard: In ios 8, users can download and install third-party custom keyboards on their device. Third-party keyboards could include specialized features such as a learning dictionary that saves unique words as they are typed into it, which could benefit medical- or technology-related professions with highly technical terms. Other keyboards might include a swipe-to-type feature that makes it easy to add punctuation or allow the user to copy and paste text by swiping keyboard shortcuts. For security reasons, users can only use the default Apple keyboard to type in secure text fields, such as a password prompt. 3. Sharing Extensions: Sharing has always been a part of ios. But ios 8 s sharing extensions allow any app downloaded from the App Store to connect to Share Sheets so users can share content such as comments, photos, videos, audio, and links right from the app. Any popular app can use sharing. For instance, a user looking up information in Safari can easily share the link through Evernote, Salesforce One, or a custom-built enterprise productivity app. 4. Custom Actions: ios 8 allows any app to add a custom action extension to extend its functionality to other apps. For example, Bing could include an action extension that allows its translation feature to extend to Safari. An Englishspeaking business traveler at a conference in Beijing could use this feature to access the agenda in Safari, tap the Share button, scroll to the Bing translate extension, and read the program in English. 5. Notification Center: In ios 8, the Notification Center includes the ability to respond to notifications from both the lockscreen and the top of the screen. When a message drops down from the top of the screen, the user can respond (or save it for later) without leaving the app. If a notification is received while the phone is on the lockscreen, the user can take action, such as accepting a calendar invitation, without unlocking the phone. This feature can also be used by enterprise apps to transmit important reminders or actions. 6. Photo Editing: As mentioned previously, Extensibility can allow users to access third-party filters, effects, and editing tools all without leaving the Photos app. Swift: Swift is a new programming language that makes it much easier to develop apps for ios and OS X. Swift removes some of the more challenging aspects of Objective-C and adds features from modern programming languages. Swift supports enterprise app development by enabling developers to program more efficiently, but it currently supports only ios 7 and ios MobileIron. All rights reserved. 9

10 Advanced Content Filtering APIs: With a new networking framework, third-party networking developers can build tools and apps that prevent access to inappropriate content, a capability that also provides a helpful security and compliance boost for enterprises. This feature is available only on supervised devices. Touch ID: When Apple first released the Touch ID fingerprint recognition technology in ios 7, it was limited to either unlocking a user s device or providing an alternative to entering the user s Apple ID credentials. In ios 8, in-house enterprise developers can now access Touch ID APIs to include the authentication feature in their own apps. Although Touch ID does not eliminate the need for a passcode, it has the benefit of offering a simple, convenient, and highly secure authentication method that eliminates the hassle of typing a long passcode several times per day. It can also help prevent data breaches resulting from a user s insecure password habits, such as writing long passwords on sticky notes and attaching them to the device. Every business should evaluate the benefits of Touch ID and consider adding it to their mobile app security mix. Figure 5: In-house app developers can now access the Touch ID API to secure apps To successfully enable Touch ID, companies should create development guidelines that specify which apps can include the feature. Companies will also need clear Touch ID policies for end users. For instance, Touch ID allows multiple fingerprints to be stored on a device. While this capability offers convenience for personal or home use, companies may want to create a policy that allows only the authorized user s fingerprint on the device. (There is no technical way to enforce this policy, but it can still serve as a good security reminder to employees.) In addition, some companies may need to consider the management complexity of deploying Touch ID in a multi-os environment and ensure Touch ID meets compliance requirements. Unified Storyboards for Universal Apps: In ios 8, it is easier than ever to create a single app interface that adjusts to orientation changes and different screen sizes on both ipad and iphone devices. Apps can be designed with a common interface and run in multiple form factors without special coding. As a result, this new feature will make it much easier and faster to develop enterprise apps for multiple ios devices MobileIron. All rights reserved. 10

11 Handoff: Handoff is an impressive feature that supports the ios 8 theme of continuity by enabling users to start a task on one ios device and continue it on another. For example, a user could start composing an on an iphone, and then finish it on a Mac after arriving at the office. (Figure 6) Or a user browsing the web on a Mac could continue from the same link on an ipad. It all happens automatically when users are signed in to the same icloud account. By enabling users to share content seamlessly between Apple devices running the new ios 8 upgrades, Handoff will become a powerful tool for increasing enterprise productivity. While every organization must be aware of the security issues with this An EMM solution can disable Handoff if the administrator desires, but we don t recommend disabling it because it offers a compelling technology that end users will want to use. type of data sharing, the productivity benefits typically outweigh the risks. An EMM solution can disable Handoff if the administrator desires, but we don t recommend disabling it because it offers compelling functionality that end users will want to use. With ios 8, end users and enterprises benefit from more apps that make their jobs easier and their businesses more productive. But some of the new application capabilities may also introduce corporate security concerns, such as data shifting to unauthorized devices and apps, that will need to be addressed through clear in-house app development guidelines and policies enforced through an EMM solution. Data shifting is an easy way to understand the difference between the new extensibility features and Handoff in ios 8. Extensibility provides a more efficient way to shift data across apps on the same device, whereas Handoff provides a more efficient way to shift data across devices. Figure 6: Finish composing an on a Mac after starting it on an iphone 2014 MobileIron. All rights reserved. 11

12 The Mobile Content Lifecycle The line between mobile content and apps is blurring. In ios 8, the lifecycle for enterprise apps now closely mirrors the content lifecycle. In the enterprise app lifecycle, IT can purchase apps through the Volume Purchase Program (VPP), push installation updates to end users, containerize the app, simplify version and inventory control, and update or remove apps from devices as needed. Now ios 8 introduces the same lifecycle to managed books and PDFs. Enabled by an EMM provider, this capability allows IT to silently push and remove ebooks and PDF documents from the ibooks app using MDM tools. This capability offers a huge advantage for Mobile First organizations because they can instantly deliver mobile content, such as sales brochures, technical guides, or business books without requiring any action from the user. Giving mobile users tools to quickly find, create, archive, and share content is rapidly becoming an enterprise requirement, one that ios 8 supports with new features such as: 1 Create content 2 Publish content to devices 3 Update content 4 Remove content when no longer needed Figure 7: The Mobile Content Lifecycle Storage and Document Provider APIs: As described above, these new APIs support the content lifecycle by enabling users to open and edit documents using more apps and share documents between apps. icloud Document Controls: To help prevent data loss, ios 8 includes icloud document controls that allow IT to restrict the use of icloud Drive for managed apps, but allow it for unmanaged or personal apps. This capability is managed by an EMM provider MobileIron. All rights reserved. 12

13 Managed Safari Downloads: IT can specify that files downloaded from specific domains using Safari may only be opened with managed apps. For example, a PDF downloaded from internal.example.com may be opened with iannotate but not Dropbox. This provides improved containerization of Safari and wider use as an enterprise browser. Safari download from managed domain Managed Books and PDFs: Together with an EMM provider, IT can purchase apps through the Volume Purchase Program (VPP), push installation updates to end users, manage the app, simplify version and inventory control, and update or remove apps from devices as needed. The same lifecycle also applies to managed books and PDFs in ios 8. Purchased Content only available in managed apps Figure 8: Managed Safari Downloads provides improved containerization of content content, such as best-sellers and educational textbooks, is distributed through VPP. In-house enterprise content, such as new-employee manuals or sales presentations, can be distributed via ibooks to relevant users or groups of users through an EMM provider. IT can also maintain version and inventory control, and distribute or remove content from user devices as needed, so users see only the managed content. As mobile users learn more about these new capabilities, they will likely pressure IT to change how corporate content is distributed and updated. And given the current trends, these users will likely get what they want. According to the Ponemon Institute research study, the majority of financial services CIOs believe end-user satisfaction is more important than security (see Figure 9). In fact, fewer than 32 percent of respondents believe the security of smartphones and tablets is more important than end-user choices and preferences further illustrating the widespread need for an agile enterprise mobility strategy that addresses these new capabilities. (2) Security End-user choice New skills are required: Respondents say the most important factors to maintain an effective mobile strategy over time are: 68% of respondents believe their CIO s think end user choices and preferences are more important than security. Agility Resources Technologies Knowledge Collaboration Leadership Security Figure 9: Results of a Ponemon Institute research study (2) 2014 MobileIron. All rights reserved. 13

14 Simplified IT Administration and Security Building on the simplified management and security features introduced in ios 7, ios 8 introduces new security and device management features to further accelerate the adoption of mobile devices in the enterprise. These new features include: New MDM Controls Device Management UI: Enrolling and understanding the impact of MDM is now easier and more transparent for users. Improvements were made to the UI of the MDM pane in settings to add more information about what specific settings are applied. New MDM Queries: ios 8 includes several new MDM queries. For example, administrators can see the last time a device was backed up to icloud so they know whether it s safe to perform certain tasks. Set Device Name via MDM: The Device Name API is useful for remotely setting the device name of the user, such as John Smith s ipad. To simplify management, IT can also set the name as part of a bulk registration workflow that includes the device by serial number and the date it was registered. The Device Name API saves time and effort because IT no longer needs to set the name in Configurator, itunes, or on the device itself. It can all be done remotely. Always-On VPN: All traffic from supervised devices can be directed through the VPN to improve security. For example, schools could use this feature to prevent inappropriate downloads on ipads issued to students regardless of the hotspot they connect to. The Internet Key Exchange (IKE) v.2 is the only supported protocol for always-on VPN. icloud Document Controls: To help prevent data loss, ios 8 includes per-app icloud document controls that allow IT to restrict the use of icloud Drive for managed apps, but allow it for unmanaged or personal apps MobileIron. All rights reserved. 14

15 Certificate Support for SSO ios 8 introduces improvements to single sign-on (SSO). The latest release includes certificate integration to extend the capabilities of ios 7 SSO. Certificate support for SSO automatically refreshes the user s Kerberos credentials by presenting a certificate when prompted for authentication. This process takes place outside of the user s view and reduces the number of user authentication prompts to help provide an uninterrupted and seamless experience. SSO does not work for devices that are outside of a trusted network. For these devices, an EMM provider is required to proxy the Kerberos ticket. Expanded Data Protection ios 8 extends data protection to more apps. In addition to Mail and third-party apps, the Calendar, Contacts, Reminders, Notes, and Messages apps, as well as user credentials, are protected with a passcode until after the device is unlocked following a reboot. The latest enhancements to ios 8 greatly simplify mobile device and app management for IT administrators and help close the security gap for end users. This is great news for mobile IT strategists to help accelerate the migration off Blackberry devices MobileIron. All rights reserved. 15

16 Enhanced End-User Productivity In addition to improved security, ios 8 also includes several Mail and Calendar enhancements designed to boost user productivity. These PIM enhancements include: VIP Mail Threads: Mail threads can now be assigned as VIP so users can easily keep up with the conversation and organize important threads in a custom mailbox. Per-Message S/MIME: Users can encrypt individual s using S/MIME. Automatic Reply: Exchange users can set up automatic replies from any ios device. Mark External Addresses: Users can mark external addresses in red for additional security. Improved Calendar Commenting: Users can now respond to meeting invitations with follow-up comments. Meeting Organizer or Attendees: Within Calendar, notifications can be sent to the group if a user is running late or has a conflict. Custom Repeating Calendar Events: Events can be scheduled to repeat at custom intervals and lengths of time. Free/Busy Calendar Lookup: Users can see the availability of co-workers so meetings can be scheduled quickly. Private Calendar: Allows events to be hidden from other users. Week Numbers in Calendar: Can be viewed or turned off based on user preference. Peer-to-Peer Airplay: This feature allows ios devices to stream content to Apple TV without the need for a shared network connection. Guests participate and share content by wirelessly connecting an ipad, iphone, or ipod touch directly to an Apple TV. For example, a sales rep could walk into a conference room and, using his iphone, broadcast his customer presentation to an Apple TV connected to a projector while completely avoiding the time-consuming network connection process. Handoff: As mentioned previously, Handoff enables users to work seamlessly between their ios 8 and Mac OS X Yosemite devices by allowing a task to initiate on one device and resume on another device (as long as the devices are signed in to the same icloud account). This feature is available with popular apps including Mail, Safari, Pages, Numbers, Keynote, Maps, Messages, Reminders, Calendar, and Contacts. For end users, Handoff is a valuable tool for staying productive at work or on the go. Not only can it increase employee productivity by enabling enterprise users to collaborate across a number of Apple devices, it makes it easier than ever to connect and share things with friends and family. As a result, end users will increasingly demand support for Handoff and other continuity features, thus accelerating their adoption in the enterprise MobileIron. All rights reserved. 16

17 Recommendations for Securely Enabling ios 8 Features Simply put, the rich set of consumer and enterprise features in ios 8 guarantee that iphone users will want (and even demand) to use them for both personal and business needs to improve their well being and productivity. These recommendations can help ensure ios 8 delivers business value to your enterprise: 1. Update your mobile strategy with privacy guidelines and EMM security policies, such as selective management, to protect life-critical workflows and end-user data. 2. Educate line-of-business managers about ios 8 capabilities. Determine how new apps can help meet their goals with productivity features such as document storage, editing, printing, and workflow. 3. Control the business impact of ios 8 by creating application development guidelines to ensure ios 8 app extensions and productivity features can be used without putting corporate data at risk. 4. Work in tandem with your EMM provider to execute your mobile strategy and securely enable ios 8 s capabilities for your business. Conclusion Mobile devices are quickly becoming the primary computing platform for enterprise users. As the adoption of mobile devices outpaces that of traditional desktops, every company will need to develop a mobile strategy to manage the changing enterprise landscape. With the release of ios 8, Apple has introduced an incredible number of features and capabilities for mobile users, including new life-critical apps, developer APIs, and content publishing capabilities. While many of these features offer significant enterprise benefits, they also introduce new privacy, security, and device management considerations that can only be managed with a comprehensive mobile strategy based on clear guidelines and enabled through an EMM provider. For more information Learn more about ios 8 and what it means for the enterprise by visiting You can also download our previous white paper on ios 7. For questions regarding your mobile strategy implementation, please contact us at globalsales@mobileiron.com. [1] The Changing Mobile Landscape in Financial Services, Ponemon Institute, March [2] Ponemon Institute, March 2014 [3] The MobileIron Trust Gap Survey, MobileIron. All rights reserved. 17