Mobile in your organisation

© 2016 SmartphoneHelp.be Q2 2016
Mobile in your
Organisation
Get ready for Mobile First !
by Joris De Sutter, Twitter: @SmartphoneHelp

The Future Present is Mobile
•SoLoCoMo
Community
• Social - Location - Collaboration - Mobile
Cooperation
Co-creation
Content

• Most apps can see your contacts
and friends, where you are, what
you do, see your photos, know
your credit card number, notify
you, etc…
• On a pc, the browser was your
window to the web.
• But your mobile IS the internet
and links to it in most everything
it does!
The smartphone IS a social platform

ITEM 1
Present
state of
technology

Operating Systems
?

Sandboxed architecture
Mobile was designed to be more
secure than the pc ever was!
 Apps are sandboxed
 OS has built-in management
capabilities
 OS is secured on firmware

• Still worthwhile in case of BES
• Future uncertain
• Latest version OS (10) has taken too long
• Has no USP’s left
• Have now released an Android device, and will
probably continue doing so !!
BlackBerry

• iPhone and iPad are simple and very
intuitive to use
• Vast choice in productive apps
• Focus on multimedia, NOT on business
• Pricy, but ideal for basic mobile productivity
• Offers great controllability through strict
sandboxing
Apple iPhone - iPad

• Simple and very intuitive to use
• Excellent Office compatibility
• Only disadvantage: limited attention
from developers
• All price points
• Windows 10 Mobile can arguably be
considered the safest smartphone OS
Microsoft

• Market leader
• “Easily” configurable to one’s own taste
• Only opt for strong processor, sufficient RAM
• Must be correctly managed, because its open
character poses big security threats
Google Android

0
10
20
30
40
50
60
70
80
90 MARKTVERDELING SMARTPHONE OS (%)
Android iOS Windows BlackBerry Symbian Andere

0
50
100
150
200
250
300
350
400
2010 2011 2012 2013 2014 2015 2016
MARKETSHARE PC'S VS. TABLETS (MIO.)
PC's Tablets

ITEM 2
How to
differentiate

 Creation
 Editing
 Continuous work
 Reading & browsing
 Media consumption
 Notes & annotating
 Presenting
 Inbetween work
Purpose of Devices
 Messages & Emails
 Notifications
 Flashing work

• Windows PC
• BlackBerry
 Windows PC
 Linux
 Mac
 iPhone / iPad
 Android
 Windows Phone
 BlackBerry
 ….
Diversity in devices and platforms will only increase!
Control and security are slipping away.
Consumerization of IT

The phone’s hierarchy of needs

Choosing the right smartphone
For those who still haven’t got a clue about smartphones:
• Do you like to “play with tech” and like to
configure everything according to your own taste
and needs:
Buy Android with at LEAST 16 GB storage
and 2 GB RAM.
• Does it need to be simple, it just has to work
without the need to search for more elaborate
solutions AND you have the budget for it:
Buy iPhone.
• iPhone is too expensive and you are looking for a
good smartphone with plenty of possibilities
without too much hassle:
Buy Windows Phone.

Choosing the right smartphone
In any case:
• Never, EVER, buy Android phones of lower value than 250 Euro!
• They are cheap for a reason!
• Bad screen
• Slow processor
• Low memory
• Bad build quality
Same for Windows phones ?
No! Microsoft needs to force itself into the market.
All Windows phones above 150 Euro are worthwhile.

What about tablets?
Your main concern should be productivity:
• Will the tablet be a mere incentive? Or is more productivity to be
expected, apart from browsing, calendar and email? Like Office,
annotation or company apps?
• If so, let the choice be first dependant on apps, second on Office
and third on annotation.
• Every tablet has email and calendar, and all can do annotation.
• Only some tablets can run your company apps.
• Only Windows tablets can run full Office without compromises….

ITEM 3
Some Practical
Considerations

What’s the Big Fuss all about?
• Are users allowed to use their own devices and/or apps?
• Can users store data on public cloud storage? Is private cloud an option?
• How about security? Virusses? Confidential data? Back-ups? Loss & Theft?
• How will devices be managed? What about differences in OS and apps?
• Is the servicedesk capable of providing support?
• Fiscal and legal regulations? Financial responsabilities?
• Is it possible to be future proof? Apple vs. Google vs. Microsoft
• Is your network ready for more complexity?

• Wi-Fi
• 802.11g up to 54 Mbit/s
• 802.11n up to 450 Mbit/s
• 802.11ac up to 1,3 Gbit/s and beamforming
• Be a realist: In real life on mobile, even for tablets, speeds of
around 5 Mbit/s are sufficient! Mind the number of users per AP!!
Bandwidth!!
• Mobile Internet
• 2G, 3G, 4G ??
• 2G internet “speeds” compromise usability on the road
Internet Connectivity

• Virtual Private Network
• Good for a secure connection between device and back-office
• Can be used for occasional access to file server
• NOT for continuous connections on mobile!
• VPN is an all-at-once connection
• Be aware that if the device contains a bad app, that bad app
can then also access your back-end!
• Consider per app secure tunneled connections
Internet Connectivity - VPN

Mobile has a large attack surface
• Most people use at least 3 devices
• Data lives everywhere. Your data
WILL cross the firewall and end up
in the cloud, on devices ,…
• Multitude of different apps from a
wide variety of sources, with risks
of malware

Virusses ?!?
• Yes, they DO exist. Even for iOS! Not yet for W10M.
• Easy to be infected?
• Only if: - user gives direct consent (OK, Install, Proceed, Next …)
- user installs hacked or side-loaded apps
• Therefor : NO jailbroken or rooted devices allowed !!
In the case of Android : Virus scanner is advisable.

The often overlooked Cloud dilemma
• Easy! Cheap or Free! Convenient!
• All true, BUT: What happens to your files and who can see them?
• Your own FileServer (or SharePoint) with secured
mobile access is a step in the right direction.
• Merely banning their use will NOT work!

Password is mandatory !
• Not only to avoid supplementary charges
• More importantly to protect the data
• What is most valuable? The device or the information on it?
• Alfanumeric is a bit exagerated, but 5 numbers is minimum.

And what about privacy ?!?

ITEM 4
BYO: Should
you bother?

Did you already realise ?
• BYOD Device
• BYOA Apps
• BYOC Content and/or Cloud
• BYOS Storage
• CoIT leads to Shadow IT !

BYO Matrix
Own Your Own
Freedom of choice on
hardware. Almost no policies
or rules. Mostly unmanaged.
Here’s Your Own
Hardware & specs defined
by the company. Strict
policies and rules. Securely
managed.
Use Your Own
Freedom of choice on
hardware. Rather loose
policies and rules. Can be
securely managed.
Choose Your Own
Whitelist of allowed
hardware. Possibly less
tight policies and rules.
Still securely managed.
Company Owned (COPE) Personally Owned (BYOD)
Security Freedom
Risk
Management

Bring Your Own - Advantages
• Higher employee satisfaction and therefore higher productivity
• Increased flexibility
• Cost savings
• Stimulation of innovation
• Retention management

Bring Your Own - Disadvantages
• Higher risk by lack of adequate security
• Unclear on responsabilities in case of calamity
• Unsecure use of files and information
• Use of illegal software
• Diversity crippels support
• Possible incompatibility with company apps
• Not every employee craves for the latest and finest

ITEM 5
How to
prepare?

Recipe For A Failed Mobility Project
• Use the old practices and tools of years gone by.
• Treat all apps and data in the same way.
• Focus only on the security of devices.
• Leave acceptance of risks and the policy over to the users.
• Try to manage what you can’t control or own.
• Don’t mind about the user experience, especially if it concerns security.

Managing Mobility
• Kinds of Devices : Enterprise grade, Mission grade and Consumer grade
• Kinds of Usage : Online, Synchronised, Offline
• Kinds of Data : Confidential, Enterprise Specific, Public
• Kinds of Users : Management, Internal, External
• Therefor : Need for a policy, to have rules and guidelines how
Devices
Usage
Data
are expected to be treated by the Users inside the organisation

The basic five C’s to cover
• Context : Who can use what and when?
• Connect : How and where does the connection happen?
• Custom : How will the user experience be affected?
• Content : What will be accessible in what way?
• Control : How will security be addressed?

Mobile Policy and Management
Implementation
• Form a committee and start spreading the word
• Make an inventory by gathering data
• Identify use cases and user groups and create economic model
• Decide how to protect network, devices and DATA
• Write the mobile policy and evangelise it
• Evaluate technical solutions and implement final choice
• Monitor use and enforce the policy

Mobile Policy Recommendations
• Mobile Policies are not only for big organisations
• Make sure the committee represents all employees
• Take your time to start by setting the goals first
• Avoid being either too specific or too abstract
• Cover legal implecations from the start

Consider a Mobile Center of Excellence
• Transform the committee into a MCoE
• Regularly review the mobile device policy
• Set the example and truly govern mobility

ITEM 6
Mobile Device
Management

Device Management Challenges
7. Monitor (international) data and call fees
2. Avoiding unsecure devices
3. Seperating business vs. personal use
8. Getting grips on incomplete asset inventory
1. Locating / Wiping lost or stolen devices
4. Safe and efficient delivery of apps and files
5. Obtaining better visibility into asset utilisation
6. Assuring better mobile service delivery to end users

Corporate LANDMZInternet
Active Directory
Mail server
Intranet Web
SharePoint /
Fileserver
RIM BES
RIM NOC
The now obsolete situation, BB Style

Active Directory
Mail server
Intranet Web
RIM BES
ActiveSync
RIM NOC
Cloud
The real current situation
SharePoint /
Fileserver
SharePoint /
Fileserver

Active Directory
Mail server
Intranet Web
RIM BES
ActiveSync
RIM NOC
What if ?
Cost ?
Control
access ?How to
Configure ?
Cloud
Control
access ?
Your Challenges
SharePoint /
Fileserver

Challenges for IT - The Ideal World
Source: MobileIron

MDM - Different Levels
1. Locking and wiping through cloud services of the OS
2. Basic PIM and device control through EAS policies
3. Basic MDM through Office365 or Google Apps
4. Professional MDM services from third party

MDM - Contenders
• AirWatch (VMware)
• MobileIron
• XenMobile (Citrix)
• MaaS360 (IBM)
• Good Technology (BlackBerry)
• Microsoft Intune
• …..

Device Management Disadvantages
1. The complete device is managed by IT, also the
private content…
2. Almost no granular control of apps and connections.
3. Only one MDM can be active on the device.

ITEM 7
Mobile App
Management

Company Apps
• Differentiate:
• Apps written for your own company or workflow process
• Common available apps used by obligation
• Main concern: How safe is the data (DLP)?
• Secondary concern: How good is the user experience ?
• Tertiary concern: How to distribute ?
• Additionaly: what about legacy desktop apps ?

• Citrix, VMWare, …
• All work is actually done on a server, while the mobile
device merely acts as a window on what you do on
the server, in a VDI or VMI environment.
• Yes, it works. BUT do mind that :
• The usability of a real MS Windows environment
(VDI) on a small screen without a mouse is a real
challenge.
• On not so speedy or limited bandwidth
connections, the experience quickly becomes quite
jerky. So this will often happen on remote
locations, even with virtual mobile infrastructure
(VMI).
Virtualisation ?

Mobilising legacy enterprise (desktop) apps,
by adapting them to a small screen.
Contra:
• No big monitor with lots of menus and buttons
• No hardware keyboard or mouse for accurate, fast and
precise data entry
• Big desktop apps get broken up in lots of different single-
task apps
Pro:
• A mobile device ADDS lots of features as location awareness,
push notifications, phone and message integration, motion
sensors, audio and visuals
The solution : App-refactoring ??

Containerisation with MAM?
MDM with MAM capabilities Pure MAM
PS: Do not forget about SSO capabilities!

What about freelancers ?
A freelancer owns a personal
device and works for multiple
companies?
Only pure MAM is possible.

Don’t forget to KISSASS !
Keep It
Stable, Available,
Scalable & !

• Follow my Twitter account for regular distribution of blog posts
on EMM : @SmartphoneHelp
• Websites:
• http://www.enterprisemobilityexchange.com
• http://searchmobilecomputing.techtarget.com
• http://mobilebusinessinsights.com
• White papers:
• http://app.box.com/smartphonehelp
Over 200 white papers on corporate mobility
Further reading

be.linkedin.com/in/jorisdesutter
@SmartphoneHelp
+32 494 03 10 25
joris@smartphonehelp.be
Want to discuss Mobile Device Issues?
smacvandaag.wordpress.com
This presentation :
www.smartphonehelp.be/files/mobile.pdf Q2 2016SmartphoneHelp.be 60

Mobile in your organisation

Recommandé

Recommandé

Contenu connexe

En vedette

En vedette (7)

Similaire à Mobile in your organisation

Similaire à Mobile in your organisation (20)

Dernier

Dernier (20)

Mobile in your organisation