Mobile devices represent a tremendous productivity advantage for today’s mobile worker. However, IT organizations must give consideration to the deployment of device security policies in order to provide the level of security that enterprises require.
WHITE PAPER
Mobile Device Security
Securing the Handheld, Securing the EnterpriseTMobile Device Security2007
CONTENTS
Motorola Good Technology Group 1 IntroductionPhone: 866-7-BE-GOOD 2 Mobile Devices: A Productivity Boon, Online: www.motorola.com/good An Enterprise Risk3 Major Security Risks5 Securing the Handheld10 Regulatory Requirements11 ConclusionMobile Device Security2007
IntroductionProfessionals are increasingly realizing the productivity bene? ts of mobile devices such as Smartphones, personal digital assistants (PDAs) and converged PDA/phones. While this mobile revolution is an advatage to professionals, it is creating a tremendous security management challenge for CIOs and other IT professionals. Proprietary and con? dential data is now moving outside of the secure perimeter of the enterprise and onto mobile devices that can be located anywhere in the world. What's more, these devices have a variety of data communication and storage technologies, such as e-mail/PIM synchronization software, infrared data transmission, ŽBluetooth and removable data storage. As a result, it is easy for mobile devices to become strongholds of enterprise information. Motorola Good Technology Group Unless actions are taken to secure this information, the mobile device represents a potentially severe security risk to the enterprise. Phone: 866-7-BE-GOODOnline: www.motorola.com/good This white paper identi? es security threats to corporate data on mobile devices and details how mobile devices can become a "backdoor" to the enterprise. This paper also details how immediate action can be taken to defend against these threats and which issues an IT security manager should be aware of while planning a comprehensive handheld security policy. While server-side and transport security is vital to an overall mobile data security plan, this white paper will focus on security as it relates to the mobile device.
Issues addressed include:. How much of a security threat is the mobile device to my organization?. What threats do these devices bring to the enterprise?. What security policies should be deployed to provide adequate protection?. Should I have any regulatory or compliance concerns?
1 Mobile Device SecurityMobile Device Security2007
Mobile Devices: A Productivity Boon, An Enterprise RiskSmall, powerful and connected to essential enterprise information, mobile devices have been embraced by professionals and are fast becoming a standard enterprise productivity tool. It is precisely this small size and enterprise connectivity, however, that make the mobile device a potential risk to the enterprise. While they may contain vital data similar to a desktop or laptop, mobile devices are far more vulnerable to loss, theft or malicious use.
MOBILE WORKERS-RAPIDLY INCREASING
The analyst ? rm Frost & Sullivan estimated that in 2004 there were 50 million workers whose jobs required them to perform work outside of the of? ce. By 2010, there will be 72 million-a number Motorola Good Technology Group representing a compound annual growth rate of over 6 percent. In addition, the number of mobile Phone: 866-7-BE-GOOD data users will grow much more quickly, at a compound annual growth rate of 34 percent. By 2010, the total number of mobile professionals using their devices to store data will be 37 million.Online: www.motorola.com/good The greatest number of mobile device users tend to be managers, sales professionals and service professionals-the people who are most likely to work with sensitive, proprietary information. According to Frost & Sullivan, executives, directors and mid-level managers make up 57 percent of enterprise professionals using mobile devices; ? eld service employees conducting installation, service and repair comprise 17 percent; mobile sales employees16 percent; and vehicle operators 1make up the remaining 10 percent.1Frost & Sullivan, Mobile Of? ce Report, 2004 INCREASING MOBILE ACCESS TO ENTERPRISE INFORMATION: E-MAIL AND BEYOND2Radicati Group, Corporate Wireless E-mail Market, 2005-2009 Access to e-mail has been one of the major drivers of mobile device use. By 2008, e-mail is still expected to be a "killer application." Numbers indicate that over four-? fths of mobile knowledge 3SANS Institute workers will have wireless e-mail access and the installed base of corporate wireless e-mail 24Gartner Group, Magic Quadrant for mailboxes is expect... [download for more]