My presentation for the Managed BYOD and Mobile USA conference that took place in San Francisco. Talks about the the pull between Enterprise Security and Employee flexibility and then how to meet the needs of the employees and the enterprise.

1. Security and Risk in a Mobile World

2. Who am I?
@bmkatz
Day job - Director at Sanofi, Head of End-User
Experience and Innovation
Just a nutter with a blog – http://ascrewsloose.com
Host: @themobilecast podcast

3. 3
BYOD is an ownership
issue. Nothing more,
nothing less.

4. 4
BYOD is dead!
It's all just mobile!

5. Enterprise Security vs Employee Flexibility
5

6. 6
What it really looks like

7. 7

8. 8

9. 9

10. 10

11. 11

12. 12

13. 13

14. What do all these have in Common?
14

15. It’s 10am, Do you know where your data is?
15

16. 16

17. 17

18. 18

19. 19
How do we get
started?

20. Let go of Legacy
Thinking

21. 21
Security has to learn to
partner with the business
and the users

22. 22
#FUN Principle
Focus on the User
Needs!

23. 23

24. 24

25. 25

26. 26

27. 27

28. Who Crafts the Policy?
• Security
• Legal
• IT
• Business
•Users

29. New Approach to
End User Computing
29

30. 30

31. 31

32. 32
Data
Apps
Device
Network
IAM

33. 33

34. 34
“Life…finds a way.”
“Users…find a way.”

35. Educate yourselves
35

36. 36

37. Offer Better alternatives
37

38. 38
Educate Everyone

39. 39
Everyone is responsible for
security…

40. 40

41. 41
Mobile phone users are at least 3x more
likely to become victims of phishing
attacks than desktop users

42. There are more than 500 3rd party
app stores containing malicious apps
42

43. 43
Dos and Don’ts

44. 44
M.D.M.

45. 45

46. Best Practices
• When setting up Data wipe policies, lock phone
first, then wipe (reporting skyrockets)
• Invest in IAM and mobile SSO
• Use your tools to figure out what your users are
using…
• Involve your users
…….

47. Best Practices
• Shrink the Perimeter
• Avoid VPN
• Allow app ratings
• Embrace Shadow Innovation

48. BYOD
• It’s an ownership issue
• Still needs to be addressed in policy
• Who owns the data (international?)
• e-discovery
• People leave…
…….

49. 49
The goal of any technology
program is to enable your
users to get work done to
achieve business goals

50. 50
Enablement

51. 51
Enablement