Mobile Security Steps

While it may not be a catastrophe, threats to the mobile platform do exist and may eventually cause widespread exploitation among interconnected handsets—A CEO sends an infected message to the sales team who then forwards to product management, etc. Michael Argast, security analyst for Sophos, recommends companies take the following steps to protect against mobile threats:

  • Write and post a corporate policy specifically for mobile devices that states what is and isn’t allowed that includes devices, software, usage, etc.
  • Restrict staff from connecting non-company mobile devices to work machines.
  • Recognize that staff wants to use non-company devices. An organization should provide employees with properly secured devices specifically for work use.
  • Establish, maintain, and enforce strong standards around device encryption, anti-virus and confidential data transfer.

Jan Volzke, head of global marketing for Mobile Security at McAfee offers these tips for risk mitigation:

  • Centrally purchase and manage all devices that employees use.
  • Choose a carrier with superior mobile security measurements.
  • Consider a Data Loss Prevention solution for the corporate network.
  • In the short term, organizations can urge all employees to use a device lock code, even on their private devices. Device lock codes are available on 90 percent of all phones available in the market.

As a part of regular due diligence and security common sense, both Sophos and McAfee recommend enacting policies and procedures with centrally managed mobile devices at the core. Further, organizations should fold straightforward guidelines and appropriate mobile solutions into its security arsenal. MB/TMP

For Your Reference

Palamida, Inc.

Sophos, Inc.