In this lesson,
we will learn about mobile management.
Mobile management includes
Mobile Device Management or MDM.
Mobile Device Management is a component
of Enterprise Mobility Management, also known as EMM.
Enterprise Mobility Management
is a suite of technologies used to manage
and secure mobile devices within an organization.
Mobile Device Management technologies are used
to enforce security policies on mobile devices,
including configuration management, application control,
and data encryption, all to prevent unauthorized access
and ensure the integrity of mobile environments.
Let's learn more
about mobile device management technologies.
With the increasing use of mobile devices
and wearables in the workplace,
securing devices has become a significant challenge.
Mobile devices frequently connect
to external networks beyond our control,
and then return to our enterprise environments,
potentially bringing security risks with them.
To address this challenge,
organizations turn to Enterprise Mobility Management,
a comprehensive approach that combines policies and tools
to centrally manage and secure mobile devices
in a corporate setting.
A key component of Enterprise Mobility Management
is Mobile Device Management or MDM.
MDM focuses specifically on the technical solutions
needed to enforce security compliance,
manage device settings, and protect data.
While Enterprise Mobility Management
covers the broader strategy of securing mobile devices
through policies and procedures,
Mobile Device Management
provides the hands-on technical controls
that ensure these security measures
are effectively implemented
across all mobile devices in the organization.
Mobile Device Management solutions
provide centralized management that allows administrators
to enforce security policies
on a wide variety of mobile devices.
These solutions typically offer six main features,
application control, password management,
multi-factor authentication, token-based access,
patch management, and remote wipe capabilities.
Let's learn about each of these.
First, application control allows organizations
to manage which applications can be installed,
configured, blocked, or removed on devices.
For example, an organization might block
social media applications from being installed
on company owned smartphones to reduce distractions
and protect sensitive information.
Second, password and passcode functionality
allow administrators to enforce strong password policies
for the entire device or for specific applications.
This might include requirements for a long, complex password
or the use of biometric authentication,
such as fingerprints or facial recognition.
In this way, Mobile Device Management tools
can prevent the use of weaker pass codes
and ensure that security policies are consistently applied
across all mobile devices.
Third, multi-factor authentication or MFA
adds an extra layer of security
by requiring two or more forms of authentication.
For example, MFA could require a password
combined with a one-time code or biometric factor.
Within Enterprise Mobility Management.
Mobile Device Management solutions
can trigger MFA requirements based on certain conditions,
such as when the device is detected
outside a geographic location,
enhancing security when devices move beyond trusted areas.
Fourth, token-based access involves
using digital certificates to authenticate devices
before they connect to network resources,
ensuring that only approved devices
can access the company systems.
This feature is often integrated with network access control
to verify that the device meets security standards
before granting it access.
Fifth, patch management enables organizations
to manage updates and patches for operating systems
and applications of enrolled devices.
A centralized patch repository ensures timely updates,
keeping devices secure against known vulnerabilities.
If devices fail to comply with update policies,
they can be restricted from accessing the network
until they meet the required security standards.
Sixth, remote wipe allows administrators
to remotely erase data from lost or stolen devices,
protecting sensitive information from unauthorized access.
This feature can be used to reset a mobile device
to its original factory settings, removing all stored data.
However, a remote wipe command does require the device
to be connected to the internet or the cellular network,
which can be a limitation
if the device is offline or in airplane mode.
To mitigate the limitation
of requiring a network connection for remote wipe,
Mobile Device Management can also be configured
to automatically wipe a device
if an incorrect password is entered too many times,
or if the device attempts to connect to the network
without meeting security requirements.
Another key feature of Mobile Device Management
is its implementation of geofencing.
Geofencing creates a virtual boundary around a physical area
such as the company's premises.
This is defined using GPS
or Radio Frequency Identification technology.
When employees' devices enter or exit this geo-fenced zone,
the Mobile Device Management system
can automatically enforce policies
such as disabling video and microphone features.
Finally, Mobile Device Management solutions
can also use device certificates for enhanced security.
User specific certificates may be issued
to uniquely identify each device
and allow administrators to revoke access
for individual devices if needed.
So, remember.
Mobile Device Management or MDM
is an important part of Enterprise Mobility Management.
Mobile Device Management helps manage
and secure mobile devices within an organization.
It also provides the technical controls required
to enforce security policies.
Policies that manage configuration, control applications,
and protect data with encryption.
Since mobile devices often connect to unsecured networks,
Mobile Device Management
helps minimize risks to the enterprise
by requiring features like multifactor authentication,
a remote wipe capability, and geofencing.
Finally, Mobile Device Management
ensures devices follow security policies to reduce risk
and protect sensitive information,
keeping enterprise networks safe.