Pub. 12 2017-2018 Issue 2

www.nebankers.org 18 Extraordinary Service for Extraordinary Members. Mobile Device Management Daniel Lindley, Network+, CISA, ISACA Cybersecurity Fundamentals, CISSP, HCISPP, CoNetrix TECH TALK T HERE WAS A TIME, SEEMINGLY NOT SO LONG AGO, WHERE business cell phones had clunky keyboards, terrible screens, and limited everyday functionality outside of making calls and checking emails. The introduction of the iPhone in 2007 changed all of that, combining not only the abilities listed above but also a music player to drown out the cubicle noise in the office, simple games to keep a person dis- tracted from actual productivity, and a decent digital camera that enabled users to fill their storage with photos of their food, children, grandchildren, and pets. While these new features were great for the average consumer and led to an increased adoption of smart phones, they created an additional headache for busi- nesses with regard to balancing device security and user data on small, easily lost, and often personally owned devices. Users began wanting access to their business email on these smart phones yet still desired control over the devices themselves. This issue persists to this day, on phones as well as tablets, and it is imperative that controls are in place to ensure company data is kept safe. Several settings must be managed for this data to be secured, regardless of who owns the device, as well as several methods of enforcing these settings: 1. Encryption with PIN. If users are allowed to access company data on a smart device, the device needs to be encrypted and a PIN enforced (four digits is okay, six is even better). For Android devices and other tablets that allow the use of removable media, an additional restriction that enforces encryption on the media must be enabled. 2. Auto-lock. The auto-lock feature should be set, along with a short timeframe for inactivity before the device locks again. This time can vary depending upon the needs of an organization, but fiveminutes is the standard recommended setting for auto-lock.