Bring Your Own Device (BYOD) Mobile Device Management (MDM) Joshua Jacobs, Sawyers & Jacobs LLC jjacobs@sawyersjacobs.com. Presented by Joshua Jacobs

Transcription

1 Welcome to Southern Financial Exchange 2013 Conference & Expo Bring Your Own Device (BYOD) & Presented by Joshua Jacobs Sawyers & Jacobs LLC Slide 1 Joshua Jacobs Joshua has thirteen years of experience providing information technology consulting services and solutions focusing on financial institutions. He is an Indiana University Kelly School of Business graduate with a Master of Science in Finance (MSF) and a Christian Brothers University graduate with a Master of Business Administration (MBA), a Bachelors of Science in Business Administration with a concentration in Information Technology Management, and a Graduate Certificate in Project Management (GCPM). He holds numerous IT and IT security certifications including the Certified Information Systems Security Professional (CISSP), the Systems Security Certified Practitioner (SSCP), the Microsoft Certified Systems Engineer (MCSE), the Microsoft Certified Systems Administrator (MCSA), and the Microsoft Certified Professional (MCP). Joshua is also an FAA certified Private Pilot and is the co author of the SSCP Study Guide and DVD Training System. He specializes in network security assessments and penetration testing, network design and support, and network virtualization. Joshua, his wife Mary, and their four children, live in Collierville, Tennessee. Slide 2 Bring Your Own Device (BYOD) When an employee uses his or her own device(s) ( laptops, tablets, and smartphones) to connect to corporate resources. Slide 3 1

2 Securing, monitoring, and managing mobile devices on the corporate network. Slide 4 By the Numbers Slide 5 46% of American adults own a smartphone Source: pewinternet.org Slide 6 2

3 Smartphone Market Share (by Vendor) Source: idc.com Slide 7 Smartphone Market Share (by Vendor) Source: idc.com Slide 8 Smartphone Market Share (by Operating System (OS)) Source: idc.com Slide 9 3

4 Smartphone Market Share (by Operating System (OS)) Source: idc.com Slide 10 How Smartphones are Used 54% of people use their phones in place of a traditional alarm clock. 46% use their smartphone instead of an actual watch to tell time. 39% have replaced their compact or DSLR cameras with their smartphone. Source: factsmark.com Slide 11 How Smartphones are Used 28% feel no need to use a laptop thanks to their smartphone. 6% no longer consume physical books. 6% use their smartphones to watch shows instead of using an actual TV. Source: factsmark.com Slide 12 4

5 How Smartphones are Used Source: pewinternet.org Slide 13 How Smartphones are Used Source: factsmark.com Slide 14 Usage on Smartphones Source: pewinternet.org Slide 15 5

6 Mobile Banking Usage on Smartphones Source: pewinternet.org Slide 16 25% of Americans own a tablet computer based on 2012 study. Previous study from 2010 showed 4% of Americans owned a tablet computer. Source: pewinternet.org Slide 17 Tablet Market Share (by Vendor) Source: idc.com Slide 18 6

7 Security Concerns Slide 19 Company resources accessed via mobile devices Source: InformationWeek 2013 Mobile Device Management and Security Survey Slide 20 Top Mobile Security Concerns Source: InformationWeek 2013 Mobile Device Management and Security Survey Slide 21 7

8 Has a mobile device, containing corporate information, come up as missing in the last 12 months? (Survey of 322 business technology professionals) Source: InformationWeek 2013 Mobile Device Management and Security Survey Slide 22 Mobile Device Management Deployment Source: InformationWeek 2013 Mobile Device Management and Security Survey Slide 23 What features do you look for in an MDM application: Source: InformationWeek 2013 Mobile Device Management and Security Survey Slide 24 8

9 Financial Institution Survey March 2013 Source: Sawyers & Jacobs LLC (Bank Tech University 2013) Slide 25 Financial Institution Survey March 2013 Source: Sawyers & Jacobs LLC (Bank Tech University 2013) Slide 26 Policy Does your policy address BYOD, Smartphone Policy, Mobile Device Policy? Do users understand they could lose all information on the device (including non company data? Slide 27 9

10 Managing the Devices Slide 28 Financial Institution Survey March 2013 Source: Sawyers & Jacobs LLC (Bank Tech University 2013) Slide 29 ActiveSync Mobile Information Server (MIS) 2002 ActiveSync evolved in Exchange 2003, including direct push in Exchange 2003 SP2 New Policies Include: require password and password length Exchange 2007 update includes: allow attachment download, max attachment size, password expiration, file share/sharepoint access, encrypt storage card Slide 30 10

11 ActiveSync Exchange 2007 SP2: Disable camera, disable SMS text messaging, disable Wi Fi, Disable Bluetooth, Disable POP2/IMAP , allow web browser, and many more. Devices provide the ability to allow policies to be applied or not. Slide 31 Apple iphone June 29, 2007 iphone released March 2008 Apple announces iphone will have ActiveSync support July 11, 2008 iphone 3G released Slide 32 : Easier onboarding process Configure Virtual Private Network (VPN) and WiFi profiles Visibility Applications (Apps) Connected devices Selective wipe Slide 33 11

12 Jailbreak: Obtaining root or full control of an iphone in order to modify the allowed configuration options and/or install unauthorized apps. Slide 34 Source:MobileIron Slide 35 Source:MobileIron Slide 36 12

13 Source:MobileIron Slide 37 Source:MobileIron Slide 38 Source:MobileIron Slide 39 13

14 Source:MaaS360 Slide 40 Source:MaaS360 Slide 41 Source:MaaS360 Slide 42 14

15 Source:MaaS360 Slide 43 ipads in the Board Room Slide 44 Summary Know that employees are using or want to use their devices on your network. Ensure you have a policy outlining what is allowed and what is not allowed. Enable the appropriate measures to secure and control devices and enforce the company s policy. Slide 45 15

16 Joshua Jacobs 1085 Halle Park Circle, Suite 101 Collierville, TN Phone: (901) Thank You! Slide 46 16