The Holistic Guide to BYOD in Your Business Jazib Frahim

Transcription

1 The Holistic Guide to BYOD in Your Business Jazib Frahim Technical Leader Security Services Practice Cisco Advanced Services May 8, 2012

2 We are in love with our devices

3 Proliferation of Devices By billion devices will be connected to the Internet The World is Changing at Network Speed Workers spend less time at their desk 47% of individual workers are now untethered from the office Increased use of smartphones 32% increase of enterprise workers using smart phones for work Employees choose mobile devices increasingly In the US 75% of smart phones used in business are chosen by employees, and 48% are chosen without regard for IT support

4 CEO Vision Use the best processes Attract and retain the best employees, keep them productive and happy Deliver best results at the best cost How can this contribute to profitable growth?

5 Deliver the best tools Achieve the best productivity Reduce complexity to deliver results at the best cost CIO Imperatives

6 What if You Could Solve Both? Delivering on CEO Aspirations and CIO Imperatives What if I could speed innovation by opening my network to customers and partners While protecting Intellectual Property? What if I could let my employees have greater freedom and choice. While lowering IT cost and complexity? What if I could let my employees bring their own devices Without compromising the way my business works?

7 BYOD - Comprehensive View Device? Where? Who? When? How? What? Tools, Content, Data At work EMPLOYEE Wi-Fi Context Aware Enforcement Context Dynamic Policy Context Aware Enforcement Cloud/Saas DC/VDI At home CONTRACTOR Mobile 3G/4G Websites Web Apps VM Client Managed Un-managed Corp Owned Personal On the road GUEST Wired Internet Manage & Deploy Intelligent Network Services Social Storage Secure, Personalized, and Contextual Service Experience Seamless - Fast - Reliable

8 Spectrum of Customer Deployment Strategies Adoption Policy Restrict, Limit, Allow, Embrace Device Ownership Corp, Employee, hybrid, guests Support Model IT managed, IT assisted, self-supported Support Level Production, Guest, Guest+, Best Effort Data Security Written Policy, MDM, Virtual, Advanced Limit Basic Advanced Embrace Environment requires tight controls Basic access for additional devices Any device, anywhere, enhanced security Any device, anywhere, anyone IT chosen devices IT managed devices with mainly on-site access All other devices prohibited Broader device set IT managed devices with mainly on-site access Employee owned and Guest devices with Internet only Wide range of devices Corp and employee owned devices with full on-site and off-site access Device-side security Guest devices with Internet only Wide range of devices Corp and employee owned devices with full on-site and off-site access Device-side security Custom native applications Guest/Customer devices with enhanced services

9 MDM BYOD Discovery Provisioning Device/App Management Network Access Data Security Web Security Application Security Profiling or fingerprinting Over The Air configuration Self-service enrollment of a device / Certificate deployment Enterprise app association and initial provisioning Device visibility (inventorying software/apps) Enterprise app control (updates, removal) Resetting the device password Managing 3G costs De-provisioning (certificate or configuration file removal) User / device authentication Posture assessment Policy compliance Context-aware access control Encryption protection (VPN and on endpoint during storage) Enforce PIN lock Remote/selective wipe Usage policy & threat defense Web application DLP Application white listing Application reputation & blacklisting

10 Challenges During the BYOD Journey Business and Technical Framework: What are Business drivers for BYOD? How does IT positively impact business goals? Compliance Operations: How do I ensure corporate legal compliance (SOX, HIPAA, PCI, etc.)? Security Operations: How do I protect my network and data assets from unauthorized access, malware, attacks, etc? How do I implement multiple security policies per user, device, etc.? Network Operations: What devices are on my networks? Which users are using what devices? What apps are being accessed? What are the real-time app performance metrics? Network Engineers: How do I troubleshoot wireless access problems? How do I separate device issues from network and policy issues? How do I ensure consistent user experience? Operate and Optimize Team: How do I support network during failure? How do I optimize the performance

11 Flexible Building Blocks for Your BYOD Solution Pervasive Wireless Collaboration Infrastructure Business Video Infrastructure Mobile Security Policy & Device Management Desktop Virtualization Compliance Core Network/Wired- Wireless Customized BYOD Solution

12 BYOD Solutions Components of the BYOD Solution Corporate or Personal Device/Endpoint ipad/ Android/Smartphone BYOD Workspace Productivity Applications Benefits Speed of Innovation Enable real-time decision making Workspace Management Secure Mobility Workforce Productivity Personal, open, consumer-like experience Policy Management Core Infrastructure Operational Effectiveness IT is in control. Policies are enforceable

13 Your Secure BYOD Journey Plan Build Manage BYOD Deployment Optimization and Operational Support BYOD Planning and Design BYOD Architecture Strategy BYOD Assessment Start here Security and Compliance

14 BYOD Journey Start to End BYOD Architecture Strategy BYOD Assessment BYOD Planning and Design BYOD Deployment Optimization and Operational Support Define Business and Technology Requirements Wired, Wireless, Security, VDI/VXI and Collaboration Strategy Identify Customer Use Case type Architecture Requirements and Gap Analysis Proof of Concept Deployment Network Management Architecture Review High-level and Lowlevel Design Development Network Implementation Planning Maintenance Operations Procedures Infrastructure Deployment Proof of Concept (Guideline) Post-Deployment Validation Performance and Security Assessment Ongoing maintenance and support Network and wireless optimization Build BOM Ready-for-use Plan

15 Network Access BYOD Use Case Any Device/Any User/Anywhere/Anytime Business Challenges Organizations spend up to $500/device n leasing, maintaining and supporting IT endpoints Employees prefer to use the devices of their choices when accessing network resources Business Outcome Authorized users can bring in their preferred devices and get differentiated access Reduced IT expenses (~$300 saved per user) Satisfaction rate improved 1 Business Scenario 2 Business Capability Enabled Users are given one-time stipend towards purchase of a device of their choice Security policies were defined to provide access based on the device type, user role, type of connectivity and location of user Employees/Contractors can access information from any location and device Differentiated Network Access through Context-aware security Reduction of IT expenditures by embracing community-support models 3 IT support limited to corporate usage: , calendaring, applications. User is responsible for dealing with the rest e.g. lost or damaged devices

16 Student Access Any Device/Any Location Business Challenges Business Scenario Students have their own preferences for form factor/os used Demand from students to access applications offcampus Business Outcome 1 2 Students are accessing student information system and learning management system from tablets and smart-phones. Learning software e.g. Matlab made available to students as virtual application if licensing allows Self-service option for students to authenticate up to 3 personal devices onto the university network; Students have the freedom to swap out authenticated devices 3 University administration scales up wireless network to handle expected surge in number of devices on the network Enhanced user experience regardless of device or location Students are more responsive in adding or updating required data Business Capability Enabled Access to instructional materials and educational application from personal devices (i.e. not restricted to the university computer labs) Support multiple devices per student (i.e. phone, tablet, and laptop)

17 Guest Access Visiting Researchers/Professors Business Challenges Business Scenario Visiting researchers require Internet access while on-site Research facilities want to offer flexibility to visitors without compromising access to intranet Business Outcome 1 2 Guest researcher enters the premises to make a presentation or attend a symposium. Building security allows them on-site after verifying their identity Guests with the lowest trust levels can access public wireless network to access external or calendaring applications 3 Employees authenticate their device on the more secure internal network and authenticate using user ID/password to gain access to internal applications Greater flexibility offered to visiting researchers Secured internal network, especially sensitive research data, in the presence of on-site visitors Business Capability Enabled Provide guest researchers with secure internet / intranet access Selective access to educational applications and data based on user type and profile

18 Your Secure BYOD Journey Plan Build Manage BYOD Deployment Optimization and Operational Support BYOD Planning and Design BYOD Architecture Strategy BYOD Assessment Start here Security and Compliance

19 Cisco Services Realize the Full Business Value of Your Technology Investments Innovative Solutions Architectural end-to-end solutions designed to accelerate your success Smart, Personalized Experience Actionable network intelligence to optimize your technology investments built on Cisco smart services capabilities Networking Expertise Experts you can rely on, information you can trust, knowledge you can use Collaborative Partner Approach Wide ecosystem of Industry partners, unmatched scalability and expertise

20 The First Step to BYOD Creating a Strategic Architectural Vision Capture and review business requirements and IT strategy at a high level Explore improvement opportunities, use cases and business impact potential Create the conceptual network architecture to enable use cases Collaborative session with IT and business leaders Prioritize Potential Use Cases Share Strategy and Architecture Framework Create Business and Technical Use Cases Understand Business Challenges and Priorities Brainstorm Improvement Opportunities Conceptual Reference Architecture BYOD Architecture Strategy And Recommendations Services, Products identification High level next steps

21 For more information visit: