What are some common Mobile Device Management standards?

1 ISO/IEC 27033

ISO/IEC 27033 is a series of international standards that provide guidance on network security, including mobile devices. It covers topics such as risk assessment, security architecture, design, implementation, monitoring, and maintenance. ISO/IEC 27033 can help you establish a comprehensive and consistent approach to network security management across your organization. It can also help you align your MDM policy with other security standards, such as ISO/IEC 27001.

2 NIST SP 800-124

NIST SP 800-124 is a special publication from the National Institute of Standards and Technology (NIST) that provides recommendations for securing mobile devices in enterprise environments. It covers areas such as device configuration, authentication, encryption, malware protection, data backup, remote wipe, and incident response. NIST SP 800-124 can help you develop and implement an effective MDM policy that meets the specific needs and challenges of your organization. It can also help you comply with federal regulations, such as the Federal Information Security Management Act (FISMA).

3 CIS Controls

CIS Controls are a set of best practices for cybersecurity developed by the Center for Internet Security (CIS), a nonprofit organization that aims to improve the security posture of organizations worldwide. CIS Controls include 20 essential actions that can help you prevent, detect, and respond to cyberattacks, such as inventorying and controlling hardware and software assets, securing configurations, implementing access control, and monitoring and auditing logs. CIS Controls can help you enhance your MDM policy by providing practical and actionable guidance on how to secure your mobile devices and reduce your attack surface.

4 OWASP Mobile Security Project

OWASP Mobile Security Project is an initiative from the Open Web Application Security Project (OWASP), a global community that promotes the awareness and improvement of web application security. OWASP Mobile Security Project provides resources and tools for testing and securing mobile applications, such as the Mobile Application Security Verification Standard (MASVS), the Mobile Security Testing Guide (MSTG), and the Mobile AppSec Checklist. OWASP Mobile Security Project can help you ensure that your mobile applications are secure and compliant with industry standards and best practices. It can also help you identify and mitigate common mobile security risks and vulnerabilities.

5 COBIT 5

COBIT 5 is a business framework for the governance and management of enterprise IT, developed by ISACA, a professional association for IT auditors, consultants, and managers. COBIT 5 helps organizations align their IT goals and processes with their business objectives and strategies, using five principles and seven enablers. One of the enablers is information, which includes mobile devices as a source and a carrier of information. COBIT 5 can help you integrate your MDM policy with your overall IT governance and management framework, ensuring that your mobile devices support your business value and performance.

6 Here’s what else to consider

This is a space to share examples, stories, or insights that don’t fit into any of the previous sections. What else would you like to add?