SOFTWARE ASSET MANAGEMENT

Transcription

1 SOFTWARE ASSET MANAGEMENT Why wouldn t it include mobile devices? Alan Giles BCS SAM/InfoSec Event, Manchester 14 th April 2016

2 AGENDA Introduction Software Asset Management evolves driven by users Not all mobile deployments are equal Application provision Containerisation The 3 steps to Mobile SAM Conclusions Questions?

3 WHY NOW IS THE RIGHT TIME TO ACT 68% of organisations can expect an audit from at least one software vendor in the next 12 months GARTNER

4 END USERS ARE CHANGING SAM REQUIREMENTS Software is increasingly being consumed whilst mobile. With or without the organisation s permission, today s IT consumers are used to accessing data and software anytime from anywhere. To enable organisations to manage the many implications of this change in behaviour, Mobile SAM is becoming an increasingly important area. Organisations are now required to manage software and licenses across all devices, desktops/laptops and major mobile platforms: ios, Windows Phone and Android.

5 SOFTWARE SELF-SERVICE INCREASING HOW DO YOU DOWNLOAD/ ACCESS THE APPLICATIONS YOU NEED FOR WORK? Around two thirds of users introduce risk by installing mobile apps that are not provided by IT. This behaviour removes the ability to control licensing and compliance on mobile devices. Users will fill the app gap, the delta between what you provide and what they want to use, if left unchecked. Source: Snow Software proprietary research August 2015

6 FURTHER RELIANCE ON APPS INTRODUCES RISK 71% of respondents say that their organisation allows employee-owned devices to connect to their company s network 96% of respondents allow employees to access company using their personal device 26% of apps access private information such as and contacts, with only 2% of apps being from highly trusted publishers Free apps in an environment can be risky, particularly if they are over permissive Consideration should be given to which apps are appropriate for connection to behind the firewall corporate assets. Source: Appthority report 2014

7 CONTAINERISATION IS IT REQUIRED OR NOT? Things to consider: Fully managed devices/cope/byod or a mix of all of these? Full containerisation/ managed apps/native experience or a choice based on user profile? Do you require visibility of all apps on a device the answer is almost always Yes End-user experience determines success of a containerised solution, deploy only where needed or appropriate Ensure your vendor can offer flexible security, matching risk profiles to solutions rather than a one size fits all approach

8 MOBILE SAM As mobile devices overtake PCs as the most-often used means of connecting to company data and apps, an organisations Software Asset Management (SAM) program needs to evolve to manage these devices and ensure that they are delivering value without introducing new risks The inventory and management of these mobile devices is a SAM issue, not isolated to the Network Security team Is being somewhat compliant enough?

9 MOBILE SAM GAIN VISIBILITY AND CONTROL SAM and EMM, a natural market progression INVENTORY Create an inventory of connected smartphones and tablets Understand who is connecting to corporate assets, and how LICENSE MANAGEMENT Cross-check licensing across mobile, enterprise and desktop to ensure compliance Derive full value from entitlement rights. DEVICE MANAGEMENT Take full control over mobile devices, including in-field deployment and resets, updates etc. Maintain security of all enterprise data and applications.

10 MOBILE DEVICE INVENTORY Mobile Device Inventory the crucial first step in enterprise mobile management, creating a comprehensive view of the mobile devices in your network The information gathered includes all of the hardware and software attributes of the mobile device, including ownership Visibility of all applications residing on the device is required to ensure corporate security policies are being adhered to

11 MOBILE SAM ONE PANE OF GLASS SDM SLM Use Snow Device Manager to populate mobile information within Snow License Manager, always showing live data

12 MOBILE SAM LEVERAGE EXISTING INVESTMENTS EMM SOLUTIONS SLM Use your existing EMM solution to export mobile device information This will simply be an export and import of data, so NOT looking at live data. Only the LATEST export.

13 MOBILE SOFTWARE LICENSE MANAGEMENT Once the mobile inventory has been completed, the next step would be to begin integrating software license management capabilities into the picture. Mobile devices are associated with people and have applications deployed on them. Software licenses are associated with an application and these devices and their software entitlements are managed for efficiency and compliance As an example, an Office 365 user would generally be entitled to access Microsoft s office applications on their PC, a number of mobile device and on the cloud under one user license. A SAM solution that has an integrated EMM capability can be used to understand these interconnections and ensure both compliance and cost optimisation is achieved.

14 MOBILE SOFTWARE LICENSE MANAGEMENT Indirect usage is a challenge that will only grow as organisations become increasingly reliant on mobile devices accessing backend systems. Staff accessing customer, manufacturing, supply-chain, logistics or finance data supplied by SAP and other datacenter software vendors need to be monitored, managed and ultimately paid-for The ability to react when blacklisted apps appear on your estate is highly desirable Understanding when an app becomes licensable is essential to ensure that an organisation remains compliant on all devices, including mobile devices

15 MOBILE SOFTWARE LICENSE MANAGMENT

16 MOBILE DEVICE MANAGEMENT Once the inventory and license optimisation challenges have been addressed, organisations can then consider full enterprise device management as a way to complete the circle in terms of managing the full lifecycle of mobile devices The need for mobile device management is strong not only because of the access that these devices have to sensitive information but because of user attitudes to them and the data and apps they hold Although an increasing number of devices are issued by the organisation to employees for work purposes, there is still a strong sense among users that a mobile is a personal device and thus is often used for personal purposes.

17 MOBILE DEVICE MANAGEMENT With mobile device management, the solution can be used to help manage many capabilities and uses of the device remotely: For example, if a user forgets/changes their password, the device can have the settings reset remotely. Another example might be a situation where a user loses their mobile device. A remote wipe of the phone can be carried out through the enterprise mobility solution so that no company data is exposed. Device management is only one part of an overall Enterprise Mobility Management solution, alongside application and content management, both essential pieces of the device lifecycle management process, ensuring the right apps are on the right device and that corporate data is accessed by those that you trust to have it in the first place.

18 MOBILE SAM GIVES CONTROL AND SAVES YOU MONEY Pay for what you use Become compliant and avoid audit fines Re-harvest software in license pools using VPP programs from Apple, Google, Microsoft Avoid illegal application usage Spread costs within the organisation Manage all apps clear visibility into apps and usage Avoid and detect harmful and malicious apps

19 CONCLUSIONS Software Asset Management works best by identifying key priorities and breaking down a long-term plan to a series of milestones or accomplishments The same holds true for managing mobile devices. The journey to full mobile device management is best started with a basic baseline inventory of devices, users and applications. From there, analysing the licensing and compliance becomes the focus to assure the true-up vulnerability is managed/mitigated Once mobile license compliance is understood, being able to fully manage the device - from automated software management through to the entire wiping of a lost mobile device - will layer into the repertoire of capabilities. Ultimately, it all begins by understanding what mobile devices are connected and can access data under the control of your company.

20 USER-CENTRIC SAM FROM MOBILE TO DATACENTER SAM MANAGER SAM for Apps PUBLISH CONTROL REPORT Cloud & Virtual Desktop & Datacenter REQUEST APPROVE ACCESS

21 SAM PLATFORM With millions of licenses sold, Snow License Manager is the world s leading SAM solution Recognize commercially-licensable applications across the network Integrate Snow s SAM platform with existing Inventory, ITAM & Service Management solutions The true multi-platform audit solution designed to find devices, audit software installs & track usage Identify & manage virtual assets across the network Cut the costs of managing complex Oracle licenses An enterprise mobility management solution that handles the full lifecycle of tablets and phones User-centric software request portal with integrated dynamic and proactive Software Asset Management Manage SAP licensing to optimize one of the enterprise s largest software costs

22 SNOWSOFTWARE SNOW SOFTWARE SNOWSOFTWARE.COM