+SYS.3.2.2.A1 Determining a Strategy for Mobile Device Management (B)

SYS.3.2.2.A1 Determining a Strategy for Mobile Device Management (B)

An organisation MUST develop a strategy which determines how its employees may use mobile devices and how the devices are to be integrated into its IT structures. The protection needs of the information to be processed MUST be a fundamental consideration in this regard. The strategy MUST cover at least the following aspects:

  • Can the MDM system be operated as a cloud service?
  • Should the MDM system be operated by the organisation itself?
  • Should the MDM system provide all the necessary apps, or can users install apps themselves? What restrictions does the organisation want to impose on the apps it provides or those that are installed by users?
  • Should the MDM system be integrated into a broader infrastructure?
  • What support and response requirements does the MDM provider need to fulfil?
  • What compliance requirements must be implemented?
  • Which mobile devices and which operating systems does the MDM system need to support?
  • Does the MDM solution need to be multi-client-capable? Does it guarantee the necessary separation of clients?
  • Do cloud services need to be incorporated?
  • Do document management systems need to be incorporated?
  • Does the MDM system need to incorporate and manage peripheral devices, as well?
  • What will the operating model involve: private end devices (bring your own device, BYOD), personalised end devices (owned by the organisation), or non-personalised end devices (owned by the organisation and used jointly)?

The strategy MUST be specified in writing and approved by the CISO.

1. Επισκόπηση

1.1 Παραπομπές

1.2 Εντοπισμένες απαιτήσεις

1.3 Σχετικοί κανονισμοί

2. Εντοπισμένες απαιτήσεις

Απαιτήσεις

3. Σχετικοί κανονισμοί

Κανονισμοί

Συνδεδεμένα ζητήματα

Συνδέσεις
blocks G 0.18 Poor Planning or Lack of Adaptation
blocks G 0.29 Violations of Laws or Regulations