6/5/2013 BYOD. About Sikich. Mobility Statistics. Mobility Makes BYOD Possible. Introduction. BYOD: Getting the Most Out of Your Technology

Transcription

1 BYOD: Getting the Most Out of Your Technology Indiana CPA Society Not-for-Profit Conference BYOD About Sikich Mobility Statistics Multi-disciplinary: An accounting, advisory, investment banking, technology and managed services firm with clients in the U.S. and internationally. Excellent reputation: With a reputation for professional excellence, Sikich provides unsurpassed client service as well as timely and cost effective services. Strong talent: We employ more than 400 talented people including 71 partners, all of whom devote their careers to a focused area. Award winning: Accounting Today ranks the Firm 40 th nationally among the top 100 accounting firms and 12 th in the top 100 VARs. $76M in revenue in ,776 public and private sector clients 7,364 individual clients 153,882 square feet to serve clients 400+ total personnel 71 partners 1 collaborative and positive culture At the end of 2012, there were 6.8 billion mobile subscriptions worldwide (The International Telecommunication Union) In a recent survey of 4,700 people: 29 percent said their mobile phone is the first and last thing they look at each day (Qualcomm) 68 percent sleep with their phone next to them (Qualcomm) Introduction Interactive session Ask questions as we go!? Mobility Makes BYOD Possible Mobile devices are a part of everyday life Technologies have developed to support that: Virtualization VDI environment Internet t access The tools make BYOD possible 1

2 What is Bring-Your-Own-Device? It s Happening Plan On It Defining BYOD Gartner: Bring your own device (BYOD) is an alternative strategy allowing employees, business partners and other users to use a personally selected and purchased client device to execute enterprise applications and access data. Average US subscriber owns 1.57 mobile devices (Wireless Intelligence) By the end of 2013 the number of mobileconnected devices will exceed the world s population. (Cisco Visual Networking Index Global Mobile Data Traffic Forecast Update) About half the world s companies will require BYOD by Ultimately, only 15 percent will never move to a BYOD model. (Gartner study, 2013) Why BYOD? IT departments looking to get out of device procurement expect same functionality at home and at work Opportunities for cost savings Where the market is going 70 percent of companies believe BYOD will or already has improved their work processes and 59 percent believe they would find themselves at a competitive disadvantage without BYOD. (Dell Quest Software Study, 2012) BYOD Risks BYOD Opportunities Improved productivity Greater efficiency for remote work Reduced costs (potentially) Aids in recruitment Pay for the services, not the phone Loss of Data Have you ever looked at anything important on a personal device? 81 percent U.S. businesses regard device theft/loss as a moderate to serious concern (CompTIA) 56 percent have experienced a lost device Make working easy and accessible Using a smartphone on a unsecure network Jail breaking devices What could someone find? 2

3 Malware Your mobile device isn t safe! What You Can Do Today Firewall Policy 6 1 Official Policy Risks everywhere games, s, social media, instant messages, etc. Can get in through an open Wi-Fi network, even text messages Mobile device malware increased 163% in 2012 (NQ Mobile) 2 Endpoint Protection Mobile malware is growing rapidly Remote Wipe w/ Exchange 5 4 Password Protect 3 SSL Bandwidth Official Policy What do people use their phones for? What will you allow? Video Social media Movies Can affect your corporate wireless network if you can t control or even scan it BYOD not a given Don t have to do it Have to address it Policy has to be enforceable with technology Communicate it! Everyone New employee onboarding Sample policy at: Endpoint Protection & Mobile Security Antivirus What You Can Do Today? Anti-malware Anti-phishing Personal firewall File shredders PC/Tablet/Smartphone/Mac Every node needs to be protected 3

4 SSL What is SSL? In-office network-level access Firewall Policy Shrinking the perimeter How does it help? Enforce policy? User experience VOIP Users Customer or Supplier Behind a Firewall Employee at a Kiosk Saas, Web 2.0 Real-Time Apps Traveling Executives Employee PDA User Employee Using a Wireless Hotspot Corporate Data Center Internal Users Day Extenders Password Protect Study: 96 percent of people who picked up a lost phone tried to access personal or business data. 45 percent tried to access corporate client. (Symantec Honey Stick Project, 2012) How to do it Why you should do it Firewall: Answer the 4 W s Who What Where Realize: It won t stop a professional When Remote Wipe with Exchange Can issue a remote wipe command from Exchange Management Caution: Remember you need a policy What happened to my personal Likely to be some negative reaction and photos??? Firewall: Control the Traffic Smartphone application traffic What does this mean? What can I limit? Do I have to block everything? 4

5 Summary There are things you can do now for minimal cost However, won t eliminate all risk File sharing apps Dropbox Evernote Data leakage I ll just send that financial document to my Gmail so I can work on it from home. MDM End Goals To improve productivity through the use of mobile devices. To allow users to have the experience they want and expect. Does not allow for a very granular policy To protect the company and it s data. Deploy Enroll devices Next Step: MDM Is deployment of devices flexible? Your Organization s MDM Solution Not a one time activity In-house or outsource? New Company Hire Bought a new phone Permanent Remote Work Mobile Device Management (MDM) The Pocket Enterprise We Say: BYOD +MDM = Anyness Anytime. Anywhere. Anyway. Gartner Says: Mobile device management includes software that provides the following functions: software distribution, policy management, inventory management, security management and service management for smartphones and media tablets. Configure Set up and secure each device System alerts Assigning privileges Role and policy configurations i Prevent users from customizing or using jailbroken or rooted devices Blacklist/whitelist Send alert to IT support X Alert! Unidentified Phone! Your Organization s MDM Solution IT support uses MDM to block phone 5

6 Assigning Roles Secure Protect the corporate network and data Policy Requirement: Executives need secure mobile access to financials C-Suite Insiders Directors Human Resources Sales & Marketing Enrolled Campus LAN Tunnel or Airport Home Wi-Fi Wireless Carrier Access Starbucks Financials SharePoint CRM HR Portal SMS Identify Ability to track the device Wipe or selective wipe App control Secure content sharing (secure places to view docs) Secure browsers Dynamic policies Corporate Private App control Personal Private Donor Info Not Secret Stuff Donor Info Not Secret Stuff Unenrolled Roaming w/ Wireless Carrier Rogue App Assigning Roles Monitor & Support Know when there is trouble and help users if they need it Policy Requirement: Block a rogue app from all registered users, anywhere. C-Suite Insiders Directors Human Resources Sales & Marketing Enrolled Unenrolled Campus LAN Tunnel or Airport Home Wi-Fi Wireless Carrier Access Starbucks Roaming w/ Wireless Carrier X Financials SharePoint CRM HR Portal SMS Rogue App How will users get help if they need it? How will you know what is going on? (app inventory, status, statistics reporting) General administration Assigning Roles Identify and remove an inactive Decommission device C-Suite Campus LAN Financials Policy Requirement: A Sales rep working from a coffee shop wants and CRM access without Insiders Directors Human Resources Sales & Marketing Enrolled Tunnel or Airport Home Wi-Fi Wireless Carrier Access Coffee Shop X SharePoint CRM HR Portal SMS When would you need to do this? Is a full device wipe the only option? What about an accidental full wipe? How does selective wipe work? Unenrolled Roaming w/ Wireless Carrier Rogue App 6