security in a mobile worldbtg.org/wp-content/uploads/2015/03/ibm-btg... · everything is being...
TRANSCRIPT
Security in a mobile world
Christian Visser
IBM, OFFICE OF THE CIO
Within each essential practice, move from manual and reactive to
automated and proactive to achieve optimized security.
Scope of mobility at IBM
Capabilities provided to all IBMers
Mobile enablement model at IBM
It’s 2015, isn’t mobile supposed to be secure by now?
So why are we still worried about mobile security?
Anything that is connected to the internet can be hacked.
Everything is being connected to the internet.
IBM’s approach to securing the intersection of mobile, social, cloud….
IBM’s approach to securing the intersection of mobile, social, cloud….
Do not underestimate the time, effort and importance of a strong policy
IBM’s approach to securing the intersection of mobile, social, cloud….
Education for IBM employees
IBM’s approach to securing the intersection of mobile, social, cloud….
Historical perimeter-based enterprise security model
Emerging mobile - cloud security model
Original industry vision for mobile security
Where the industry ended up in terms of mobile security
Focus security where it matters,
give more flexibility where it doesn’t
CIO trusted access services model
Options for trust enforcement
Overall approach
IBM’s approach to securing the intersection of mobile, social, cloud….
Success requires usable security
IBM’s approach to securing the intersection of mobile, social, cloud….
Mobile speed requires cloud speed Maas360 migration
27
Mobile Device Provisioning and Setup Improved Dramatically Through Automation and Apple + IBM Partnership
Instantaneous setup
5 Minutes To set up IBM seller’s iPads with security profile and IBM apps (instead of 2 hours).
16 IBM Apps • auto-installed on Seller’s iPads.
• Frictionless setup. Get productive right away
Auto-configuration of
IBM Collaboration Apps with Fiberlink MaaS360
43K iPads deployed by mid 2015
Deployed by IBM CIO Team using MaaS360 and Apple’s Device Enrollment Program
E-mail, Calendar using IBM Traveler Time reduced from 4 days.
Single global process instead of 10 regional processes
Mobile provisioning
Takeaways
Security is more than IT only, importance of enterprise security strategy, policies and education Focus security where it matters and apply holistic integrated approach
DELIVERY MODELS
SECURITY TRENDS
Skills Shortage
Compliance Mandates
Cloud Advanced Threats
Mobile and Internet of Things
Strategy, Risk and Compliance Cybersecurity Assessment and Response
Security Intelligence and Operations
Advanced Fraud
Protection
Identity and Access
Management
Data Security
Application Security
Network, Mobile and Endpoint Protection
Advanced Threat and Security Research
IBM’s security portfolio
Management Consulting
Systems Integration
Integrated Products
Security as a Service
Managed Security
Partner Ecosystem
@visserchristian
Case Study Maas360 Railcom
Waterschap Brabantse Delta
Challenges
•WBA used an alternative MDM tool in the past but they were looking for a secured extension of sharing corporate data over VPN connections.
•Secure the mail backed to the front-end Mobile devices
•Co-workers with other MDM profiles conflict with new MDM profiles
Solution & Benefits
MaaS360 offered WBA a possibility to offer them a secured VPN access to these Mobiles devices so all mobile engineers are now able to access WBA data into a secured Mobile cloud.
Results:
•Secure VPN access
•Secure Mail (AES 256 bit encrypted)
•Full Mobile management
•Corporate App management
Waterschap Brabantse Delta (WBA)
•Located in Breda, NL
•Industry: Government
•Services: Governs the Water Management Systems for +-800k people, 25k companies within 21 local communes in the south of Holland.
Go Vlaanderen
Challenges
Most schools using a BYOD strategy to share student/school data on these mobile devices.
Teachers are keen to share school data content within a education secured network.
Solution & Benefits
With MaaS360 GO Vlaanderen offers a single Mobile framework to offer schools the opportunity to leverage secure school data into a well secured container ( Doc share)
Results:
•Students/teachers can easily enroll to the service ( 5min job)
•Teachers can share Daily tasks and control the delivery to Students
•Students can edit School task on a mobile devices and forward results
•Go Vlaanderen uses one ‘single pane of glass’ to access to thousands of mobile devices (BYOD) .
Go Vlaanderen (flemish Public school system)
•Located in Brussels, Be
•Industry: Government
•Services: Public entity that embodies the Flemish Public school systems with +- 28 School Entities/regions with +-40 teachers and +-1,2million students
OCMW Zwijndrecht ( Antwerp)
Challenges
The OCMW had the challenge to manage the mobile workers on the field. Some of the data shared with their employees are confidential information.
Solution & Benefits
MaaS360 offered OCMW a single pane of glass to connect all ipads on the field with the backend system
Results:
•Mail backend is securely presented on these Tablets ( AES 256 bit encrypted)
•PDF files can be shared in a secured way
• Manage and track devices on the field
•Positive ROI via SaaS model
OCMW Zwijndrecht
•Located in Antwerp, Be
•Industry: Government
•Services: Public center for social welfare
BeNelux Business Partners