What do you do if your company's mobile device management needs more security?

In my experience, you need to have an MDM, MTD, and conditional access solution to cloud apps. An example would be Ivanti MDM, MTD, & Ivanti Access, VMWare offers MDM & Access, with 3rd party MTD providers. Considerations for a Microsoft Shop are to compare use case support & licensing. Intune appears free, but do a POC to find out EXACTLY what you will use, and the cost of those components before you buy.

Identify potential vulnerabilities in the existing MDM system, such as outdated software, lack of encryption, or weak authentication protocols. Engage with IT security experts to evaluate the likelihood and potential impact of various security threats, including data breaches, malware attacks, or unauthorized access to sensitive information. Utilize penetration testing, vulnerability scanning, and threat modeling techniques to assess the effectiveness of current security measures and prioritize areas for improvement. Implement robust security controls, such as multi-factor authentication, encryption, remote wipe capabilities, and regular security updates, to mitigate identified risks and enhance the overall security of the MDM system.

When implementing, you need to know what you’re actually setting up. For example; Intune App Protection Policies are simply said, managed applications. We also know this to be MAM. Intune can support MDM, but often times what is free or comes with lower level O365 licenses for small-mid size businesses, is not true MDM. Be sure you are FULLY MANAGING devices. Supervise iOS devices that you have purchased with Apple Business Manager. Provision company owned androids using Google Zero Touch. Make sure your implementation team is not just “going through the motions” but instead providing thought leadership. Your engineer should be helping you align the deployment type to you use case needs.

Defining acceptable use guidelines, including device eligibility criteria and security requirements is a good place to start. Enforce strong authentication measures, such as passcodes or biometric authentication, and implement device encryption to protect sensitive data. Regularly educate employees on security best practices and provide resources for securely configuring and managing personal devices within the company network, ensuring alignment with organizational security policies and compliance requirements.

Provide comprehensive training on security best practices, such as creating strong passwords, recognizing phishing attempts, and safely accessing corporate resources from mobile devices. By raising awareness of potential threats and promoting responsible device usage, employees can become active participants in maintaining the security of company assets, reducing the risk of data breaches or unauthorized access. Regular updates and refresher courses ensure that employees stay informed about evolving security threats and mitigation strategies, fostering a culture of security-conscious behavior within the organization.

Utilize compliance assessment frameworks, audits, and third-party evaluations to evaluate the effectiveness of existing security controls and identify gaps or areas of non-compliance. Implement necessary measures, such as encryption, access controls, and data protection policies, to align with regulatory requirements and ensure the security and privacy of sensitive information on mobile devices. Regular monitoring and documentation of security measures facilitate ongoing compliance and mitigate risks of regulatory violations.