Mobile (Cell) Phone and Smartphone Risk Management Review
Introduction
The use of mobile devices, be they basic cell phones or more advanced smartphones, introduces a whole new level of complexity for a business trying to protect its assets. The network perimeter now sits inside user’s smartphones as these devices enable users to access corporate data and assets from almost anywhere.
This access to data is a tremendous boon to businesses as mobile working can be more productive than ever before. Accessing emails and data on the move can now turn downtime into useful browsing and catch-up time. Unfortunately the growth in smartphone devices has attracted a huge interest in the hacker and criminal community who are now actively targeting these devices to access confidential data. The first many organisations know about such risks is when data has been leaked or stolen, and then it is too late.
The good news is that it is possible to secure these devices from attack and provide a safe environment for users and data.
The Benefits of an Independent Mobile (Cell) Phone and Smartphone Risk Management Review
The review will start by understanding the business objectives behind providing a mobile infrastructure and then move into an analysis of the tools and technologies in support of this.
Typically the report will cover:
• Business requirements and use of smartphones
• Approval process for devices and users
• Assessment of appropriate information security policies and supporting governance
• Technical infrastructure in support of mobile devices
• Physical security risks and smartphones
• Information security issues and risks
• The protection of rich data including voice data leakage
• Actionable steps that can be taken to secure a smartphone estate
Follow-on services after an Audit
After the audit has been completed the team at Incoming Thought would be delighted to work with you further across other areas of your risk portfolio. Typically this would consist of a range of practical and useful services ranging from consultancy engagement to address particular risk issues through to training and awareness for executives and staff. All of these services can be customised to meet local objectives.