You're working remotely. How do you know which mobile device security tools to use?

Many know that Apple devices are not well-known for running Antivirus software. But today, you need layers of security (defense-in-depth). I feel safer running Endpoint Detection & Response (EDR)—a modern replacement for Antivirus—on all my Apple Macs. (I've not yet seen a solid third-party iPhone/iPad solution. Can anyone educate me?) However, don't just throw your favorite Windows solution on a Mac. Be sure your EDR tool is Mac-friendly and has a support team that knows how to assist Mac users.

Antivirus is basic requirement for any endpoint either working inside or outside. It helps to protect endpoint from insider and external threats.

As someone who has been in the mobile security space for 20 years, i have come to understand security requirements evolve as technology evolves. Defining the requirements and consistently re-evaluating this is critical. What is missing on this list is a Mobile Device Management solution. The implementation of an MDM solution is not a nice to have but a mandatory piece of thr puzzle.

Today, almost every IT department uses some form of mobile technology. Even though smartphones, laptops, tablets, and other mobile endpoints are incredibly useful for an organisation, they can be difficult to manage. Mobile devices are great tools in the workplace to manage laptops and smart phones.

Software antivirus could be the most important application in any smartphone. Some antivirus can protect the devices from phishing, malware, Trojan and sometimes from bloatware. I some cases AV block the notifications from malicious web sites. This last point is very important because some users accidentally accepts those notifications and let the hackers affect them devices.

Bitte hier nicht VPN und VPN verwechseln. Wir haben hier zum einen das VPN (Virtual Private Network), wie man es in der Werbung vieler YouTuber sieht. Das macht nichts sicherer, aber das Surfen etwas anonymer. Und du kannst dir dein YT-Premium billig für türkische Lira holen. Und dann gibt es noch das Company VPN, dass deinen Rechner mit dem Netzwerk der Firma verbindet und wirklich zusätzliche Sicherheit bietet. ;)

VPN service is secure, reliable, and essential for MDM, as per the number of users in the organization to access data securely anywhere in the world, easy to manage hundreds of devices remotely and keep the device secure and protected from unauthorized users.

Having VPN for mobile devices is good to have feature due to potential malware from browsers or apps. This offers increased security, privacy, and access to restricted content.

In my experience it is incredibly important to use Virtual Private Networks in both personal and work scenarios. When transmitting any information that would be considered sensitive or harmful we owe it to ourselves and our clients to behave in a safe and secure manner. Having a secure connection is one of many ways to practice confidentiality which we as agents are responsible for maintaining. If we want to be trusted with end user information then we must be able to assure them that their information is in the right hands and is safe.

In addition to all the above tools, device management (using MDM) is a very effective tool that can be incorporated. Device management ensures IT, user and company that everything needed to protect the device & data along with security and usage policies as per compliance are taken care and followed. And in case of loss and theft of device, damage control is taken care of.

Nearly any password manager is better than none (assuming it's from a legitimate source). I have used 1Password.com for years and can't recommend it enough. It works across all the devices, platforms, and browsers I use. I could not live without it.

Using a password manager is crucial for enhancing security and convenience in managing online accounts. It prevents the common risk of using the same password across multiple services, which is particularly dangerous if an account is compromised. With a password manager, there's no need to remember every password, as it securely stores and recalls them for you. Additionally, it can generate complex passwords and automatically fill in login forms, simplifying and securing the sign-in process for users

There are many password managers out there to use, deploying a standard password manager in your business allows for better security, and better practices for your employees.

Almost any password manager is better than none. Using a password manager is crucial for enhancing security posture and is also convenient. It prevents the common risk of using the same password across multiple services, devices, etc. which can be very dangerous if an account is compromised, especially if they know other tools or resources you use - they could try using that password to try and access other resources you have / own / use. With a password manager, there's no need to remember every password, as it securely stores and recalls them for you. Additionally, it can generate complex passwords and automatically fill in login forms, simplifying and securing the sign-in process for users.

Using a password manager offers several benefits for individuals looking to enhance their online security and simplify their digital lives: Stronger Passwords: Password managers generate complex, unique passwords for each of your accounts, significantly reducing the risk of unauthorized access compared to using weak or repetitive passwords. Improved Security: Storing passwords in an encrypted vault ensures that your sensitive information is protected from hackers and unauthorized users. Password managers employ advanced encryption algorithms to safeguard your data. Convenience: Password managers streamline the login process by automatically filling in your credentials when you visit websites or use apps.

Many people don't use encryption for them devices. They never think that them devices could be lost or stolen. It's important have a strong password or large pin but it only prevents to access the devices, the data could be copied or accessed from another devices. For example if you lose your computer a hacker could connect your hard drive to another devices and he will have your data. To protect for this cases exists the encryption. Some company's like Microsoft let us use "free" encryption services like bitlocker. You only will need a genuine windows installation.

Usando las capacidades de los #UEM, los administradores pueden forzar que el usuario aplique métodos para bloquear el acceso al dispositivo, tanto códigos PIN robustos, como credenciales biométricas. Se pueden añadir capas adicionales de cifrado a las que proporcionan los fabricantes de OS mediante herramientas específicas en función del nivel de seguridad requerido.

Both macOS and Windows offer built in encryption for your company and personal devices. While the platforms make every effort to encourage the user to turn these on, it doesn’t always happen. I recommend you enforce encryption using and MDM platform

In this hybrid or remote work enviroment each mobile device should have an encryption policy applied to be compliant with security policies. Most of the mobile devices has this feature preinstalled, Windows has bitlocker,Macos has filevault so on. For company owned devices it is advisable to use a integrated platform that can manage all the encryption keys and policies as Intune. This type of approach minimize Administrator's effort and user has following advantages : data accesibility and confidentiability.

I have heard from many people in business who tell me they are *not* concerned with losing a device (smartphone or laptop). They trust themselves, and they trust their employees, and they have backups. Then it happens, and everyone panics. Walk through a tabletop exercise today to simulate losing your device. Can you remotely erase it? Can you quickly and sufficiently restore what is lost to a new device? Can you prove to an insurance auditor — and your clients — that no data was compromised?

MDM solutions like Microsoft Intune, or Jamf Pro help manage and secure mobile devices by enforcing policies, configuring settings, and remotely controlling device access. In the event of theft or loss, these devices can be remotely wiped to prevent sensitive data getting into the wrong hands and is a must have for any organization supporting remote workers.

In my experience supporting MDM devices I have seen first hand how critical defense in depth is even at the smallest scale. Work phones are often trusted with critical company information that is needed for end users to carry out job responsibilities. If these devices were to be lost or stolen it would pose a threat to the company if that device would fall into the wrong hands. One way we as MDM supporting agents can mitigate the risk of sensitive information getting out is by performing a device wipe when a device is lost/stolen. When a device is wiped all the information will be taken off and restored to factory settings. From there a device restore could take place once the user received a new device. This is why backups are important.

Now days security is major concern for all companies, It is much better to use VPN + Two-factor authentication. Back end each session recording should be ON as well.

Aunque el borrado remoto sin duda permite mitigar el riesgo de fuga de información, es necesario considerar que en algunos casos, el usuario cuenta con una parte personal con su propia información. Algunos #UEM permiten que en terminales de propiedad corporativa se pueda eliminar solamente el perfil de trabajo, sin eliminar la información personal el usuario. No obstante, el borrado del dispositivo no debería conllevar la pérdida de información, si previamente ha definido una metodología que facilite al usuario que toda la información corporativa está guardada en el cloud de la compañía.

This method provides you extra layer of security as you need to verify authentication from other app which will itself verify your signature and then it will provide you the code to verify.

It is more secure that other user should have OTP for login new device from new location. Beside its easy way to recover password if forgot. As well as other people can try to get access but will surrender to Two factor authentication.

Be careful with sms code for 2FA because it’s not really secure compare to alternative methods like Fido key or Authenticator App. If your are using an Authenticator App you must securise access to your smartphone the maximum you can with an alphanumeric passcode for example.

Well, some people might be annoyed and troublesome with this step yet it is useful for the users that required to login from different devices. I find it secured whenever I have to work on other devices that don't belong to me.

This method is a secure way as you have to verify using your email address or another application to be able to verify the token key or one -time-pin in order to have access.

One of the best ways to increase security is to stay current with the most recent security updates for operating systems and programs. It is expected to configure remote devices to install critical security updates automatically. A big pro is that you can be more secure from known threats. One con is a slight chance that patches that install automatically might cause a user’s device to malfunction.

Organizations can use external tools, such as Endpoint Management, to secure mobile applications and control user access. This prevents data leaks and enhances security on company devices by publishing secure mobile apps and applying restrictions on data sharing and access.

I would also recommend that you protect the data with an information protection solution such as sensitivity labels. Most labeling solutions also encrypt the document in-application tied to information rights management which means the protection travels with the document so it is always encrypted and protected both in-transit and at rest.

Lockdown your mobile devices much like you would do for a corporate desktop system! They are typically more exposed to the public and vulnerable! Encryption, Remote Wiping and Lockdown are just good ideas! AND finally ... no company data on personal devices!

I think at least a VPN that ensure your browser is secure or a mobile security suite from vendors like Norton, McAfee or Kaspersky that offers Wi-Fi protection, VPN. Passwords apps like Keepass can be useful as well.