How To Protect The Agency From Hackers On A Cell Phone Or Tablet Device

Transcription

1 PRODUCT DESCRIPTION Product Number: MOBILE DEVICE MANAGEMENT (MDM) Effective Date: Month 00, 0000 Revision Date: Month 00, 0000 Version: Product Owner: Product Owner s Name Product Manager: Mart Gardner Phone: martg@utah.gov Mobile computer devices, commonly known as a tablets and smart phones or Personal Digital Assistant (PDA) are a type of computer device integrated into a flat touch screen that has no dependency on a physical keyboard. Such devices may be based on Apple s ios, Android OS or Microsoft s Tablet OS to name a few. (OS is short for Operating System) MDM services can secure smart phones & tablets, monitor activity, manage use and improve deployments across the agency by deployment and use of agency standards. MDM support includes over-the-air distribution of applications, data and configuration settings. This applies to both State-owned and employee-owned devices accessing the State s enterprise network. Us of the MDM service can improve protection of the Agency s data through enforced security configuration for all mobile devices accessing the Agency s network. By using the MDM services business risks is reduced. With tables becoming more widely used in the State and applications flooding the market, mobile monitoring is growing in importance. APP developers today test their software in real time by pushing Apps out for free. MDM can set up an approved App store so only approved Apps are offered to Agency personal. DTS will continue to support synchronization of between the State s services and any devices. This will be real-time synchronizing of , calendar, address books, and more depending on available technologies. DTS Version 1.0 Page 1 of 7

2 Note: the following list of feature is depended on the device s ability to use the features. Some feature may not apply to some devices. Product Features and Descriptions Platforms Feature Description Android: Operating system versions supported include: 2.2 Froyo, 2.3.X Gingerbread, 3.X Honeycomb, and 4.0 Ice Cream Sandwich. Apple ios: Complete management for iphone, ipod touch and ipad Operating system versions supported include: Apple ios 4 and 5 Blackberry; Deployments with key management functionality experienced from a BlackBerry Enterprise Server (BES). Operating system versions supported include: BlackBerry 4, 5, 6 and 7 Symbian: Operating system versions supported include: Symbian^3 and Symbian S60 Windows Mobile: Complete management for Windows Mobile (Embedded Handheld) Operating system versions supported include all Windows Mobile 5+ Windows Phone: Supports for Windows Phone 7+ Agency Splash Screen SDK Tool Kit Enrollment into State Access Self-Service Portal Custom Enrolment screen by Agency and or custom start up screen when attaching to the network. Software Development Kit for enterprise and Agency app building Quick and easy self-service enrollment for end users who want to use the State/Agency network services. Allow DTS administrator to stage devices on behalf of the Agency to simplify enrollment Agency approval of work flows for enrollment requests Automated user authentication and device provisioning Enforced acceptance of End User License Agreement(s) Self-service support capabilities without DTS involvement. Enable end users to clear their passcode, locate their device Device Support View an end user s device screen and take screen captures Perform remote diagnostics to identify device issues in realtime DTS Version 1.0 Page 2 of 7

3 Take remote control of an end user s device for troubleshooting Broadcast Messages Send a customized message to end users devices App Purchasing Track Volume Purchase Program (VPP) orders, including order date number, status Monitor licenses purchased, redeemed and remaining for each order Associate orders to a purchase order number, Agency and/or ELCID Upload, store and distribute redemption codes to authorized users Confirm the redemption of codes and successful installation of apps Cloud Support Store documents in a cloud-based content management console fully encrypted Upload documents individually or through a bulk import Support multiple document types: Office, iwork, PDF, JPG, etc Organize content using custom document categories and metadata Track document versions and update history View which users have downloaded a file and when it was last viewed GPS Tracking Application (App) Support Policies Enforcement The ability to find or track devices that are GPS equipped. Distribute managed (enterprise or Agency) apps wirelessly without user interaction Integrate directly with public app stores, like itunes, to provide Agency approved, public apps Integrate with Apple s Volume Purchase Program to purchase business apps Secure distribution of apps based on groups with unique requirements and access Provide an enterprise app catalog where users can view, install and update apps approved by the Agency or State. Provide an Agency app catalog of Agency developed apps. Restrict native apps on a device by way of a whitelist/blacklist publicly Receive alerts when an employee has installed an unapproved app Application inventory, version history, and compliance reports Install, update and remove managed apps from a device remotely Custom Agency License Agreements and require acceptance during enrollment DTS Version 1.0 Page 3 of 7

4 Passcode polices Passcode enforcement with ability to lock access after failed attempts Device restriction; Require a device passcode with configurable complexity, length, lock and wipe rules Enforce full device and storage card encryption according to Agency policy Lock down an end user s ability to use specific device features, apps and web browsing Set up rules for non-compliant activities and compromised devices with automated responses Policy enforcement; Configuration of settings and policies based on ownership in line with Agency and/or State policies. Set up enrollment restrictions to block users or devices based on platform, version, etc Fast Deployment Setup DTS can stage devices on behalf of the Agency simplifying the enrollment and setup of devices. Enable DTS to register existing devices in bulk or end users to selfregister their device Document Management Configure what data is collected and who can view it for different device groups Time limited Document management Authenticate users before allowing them to view and download Agency documents Define effective and expiration dates for each document Define settings for document transfers over cellular or Wi-Fi networks Enable users to view documents offline or only while online Store approved content for offline viewing Update all documents with a single click Device Security Send commands on-demand to devices to request info, lock or wipe a device Retirement: Un-enroll devices from Agency environment, remove State and/or Agency data and wipe device Disable access to corporate apps if an end user leaves or loses their device Passcode enforcement with ability to lock access after failed attempts Encryption for data in transit and data stored within an enterprise Agency Content Protection Isolation of personal and corporate data on device Privacy settings to prevent viewing of personal data DTS Version 1.0 Page 4 of 7

5 Removal of corporate access and data for non-compliant devices GPS Document Access Control BYOD Support Secure access to enterprise services, apps, and content depending on location of when viewed. Bring Your Own Device (BYOD) The reality is that more employees than ever before are using their own smartphones and tablets for State work, creating new security and management challenges. MDM services helps with BYOD devices by enforcing State/Agency policy on all devices including BYOD devices. Synchronization Calendar Synchronization Address Book Synchronization App installing Troubleshoot Configuration Synchronization of between the State of Utah s primary service and any employee s Mobile Computer. Giving access to one s from any Mobile Computer. Synchronization of the calendar ability associated to the State of Utah s primary service and any employee s Mobile Computer. Giving access to one s calendar from any Mobile Computer. Synchronization of the address book associated to the State of Utah s primary service and any employee s Mobile Computer. Giving access to one s address book from any Mobile Computer. Providing app support in the form of finding app s to meet the business needs, instructions on uploading / installing. Working with the Mobile Computer vender or manufacture in solving problems. Developing a standard configuration that meets the business needs of the Department and State of Utah. Providing detailed instructions on setting up Mobile Computer. Features Not Included Feature App use training Device training App Development Backup App publishing Explanation Training on the use of any app is not included Training on the use of any type of device such as ipads, iphone etc. is not included The development of apps is not part of this service Backing up of the data of any type of device is not included in this The publishing of apps to itunes is not covered by this. Note this does include publishing apps to any local Agency itunes type store. See App installing above. DTS Version 1.0 Page 5 of 7

6 Rates and Billing Feature Description Base Rate MDM Services The services listed above in this product description are included, in part or full as described. $14.25 Ordering and Provisioning Blackberry Cell Phone Order by filling out the online order form and submitting it following the instructions on the form. The form can be found on the DTS web page. Support Call the DTS Help Desk and request help with any Mobile Computer problems. MDM Services Order by contacting the Enterprise Applications Services team or the DTS Help Desk DTS Responsibilities DTS/EAS is responsible for maintaining the hosted application DTS/EAS will setup services for Agencies DTS/EAS is responsible for needed changes to any Agency MDM environment. DTS/EAS will perform backups of the host application and any sub-parts used to support the services DTS/Hosting is responsible for the VM server and the OS there on DTS/EAS is responsible for updates to the hosted application and all of it components. DTS is responsible to keep the service up and available to Agencies 7/24 99% of the time Agency Responsibilities The Agency will be responsible for security policies that are not coved by the DTS standard policy If the Agency offers any part of the MDM services they will be responsible for detailing how the services are to be used. Agencies are responsible to report any loss of services or outages Agencies are responsible for content outside of the MDM services itself. Service Levels and Metrics Up time of 99% DTS Version 1.0 Page 6 of 7

7 Number and type of services consumed by Agencies DTS Version 1.0 Page 7 of 7