第三方媒体解决BYOD策略探析

需积分: 7 137 浏览量更新于2024-09-12 收藏 720KB PDF 举报

"这篇文章主要探讨了企业如何应对BYOD（Bring Your Own Device）的趋势，即员工使用个人设备进行工作，并提供了第三方媒体的观点和建议。在2012年和2011年的两份报告中，都强调了BYOD带来的挑战和安全问题，以及企业如何制定策略来管理和保护数据安全。" BYOD，即Bring Your Own Device，是近年来企业中越来越普遍的现象，员工使用自己的智能手机、平板电脑等设备进行工作，这为企业带来了灵活性和效率提升，但同时也引发了诸多挑战，尤其是在信息安全方面。首先，BYOD的主要挑战之一在于定制应用程序。企业需要确定哪些应用程序适合员工在工作中使用，并可能需要开发内部"应用商店"，提供经过批准和定制的企业级移动应用。例如，Merit Medical Systems的销售和市场营销技术总监Lincoln Cannon提到，他们已经识别出需求并计划开发定制化的移动应用。其次，安全问题成为BYOD策略的核心关注点。2012年的报告中提到，"Bring your own device"将在当年对IT安全构成威胁，表明企业必须定义清晰的安全策略。成功的BYOD实施需要四大关键因素：明确的安全定义、设备管理策略、用户教育和持续的政策审查。这些因素旨在确保员工设备上的敏感公司信息得到妥善保护，同时平衡员工对个人设备使用的自由度。此外，员工拥有的设备是一把双刃剑。它们可以为企业节省硬件成本，但也可能导致数据泄露风险。因此，企业需要寻找兼顾效率与安全的解决方案，如采用移动设备管理(MDM)软件来远程控制和监控员工的设备，实施数据加密，以及设置访问权限控制。部分IT部门可能尚未准备好应对BYOD的挑战，这要求企业高层、IT部门和员工之间建立良好的沟通机制，以确保所有人都理解并遵循既定的政策。同时，企业也需要持续关注技术发展，以适应不断变化的 BYOD 环境，比如物联网(IoT)的崛起可能会进一步增加设备和数据管理的复杂性。总结来说，第三方媒体通过报告指出，BYOD趋势为企业带来了机遇与挑战。企业需要制定全面的策略，包括定制应用、安全管理、员工教育以及适应性的政策，以充分利用BYOD的优势，同时防范由此产生的潜在风险。

THE CONNECTED ENTERPRISE

SPECIAL REPORT

JULY 2011

3 www.networkworld.com • tHe connected enterPrISe

INSIDER

NetworkWorld

Four keys to successful BYOD

process beyond the iTunes and Android store

approach, in an effort to deﬁne strict coding

practices for an in-house apps store. There

is huge momentum around BYOD, and Kad-

rich acknowledges that one day it is likely to

be a component in Kaiser Permanente’s IT

strategy.

Like Kaiser Permanente, a number of

IT consultancies have expressed doubts

about whether BYOD is truly cost-effec-

tive. Although it may look at ﬁrst glance as

though a company is saving money by hav-

ing employees buy their own mobile devices,

perhaps with a corporate stipend, there are

management costs that may not work out to

the company’s advantage. Aberdeen analyst

Hyoun Park, for instance, notes that telecom

rate plans, for example, cost less through tra-

ditional contract negotiations than through

individual contracts.

As far as cost-savings go, “the jury is

still out on BYOD,” says Joe Nocera, prin-

cipal in the IT security risk practice at

PricewaterhouseCoopers. He thinks the

BYOD “promise of cost-savings” is largely

“unrealized” today.

BYOD raises questions about security

controls and how forensics will be done on a

device owned not by the company but by the

employee, Nocera notes. He also is skeptical

about how far MDM software goes today to

meet strict security requirements. “Its func-

tionality is very limited,” he says of current

MDM packages. “All they do is secure email

fairly well.”

The main goal has to be securing the data

on the device and having a way to validate

it through risk assessments, he says. In

regulated industries, such as healthcare and

ﬁnance, there are going to be audits of these

BYOD mobile devices and the apps that are

used, Nocera points out. Unfortunately, in too

many cases, businesses are thinking about

these questions only after they’ve rolled out

BYOD practices.

Some user discussion groups have taken

up the topic of BYOD so that IT and security

managers can share ideas. Austin-based

Wisegate IT community, for example, a group

in which Kadrich participates, recently pub-

lished a report titled, “IT Peers Share Advice

on Effective ‘Bring Your Own Device’ Strate-

gies.” The upshot: There appears to be little

consensus so far.

Some 27% in the survey on BYOD said

they’ll only allow “fully managed and secured

devices to utilize corporate services,” while

24% said, “We are moving from a ‘device

centric’ strategy to a ‘user centric’ strategy

and don’t think that devices can be fully

secured. We focus on securing the sensitive

transactions.” Another 20% claimed to have

a “hybrid approach” in which more secured

devices get more access and less secured/

managed get less access.

Tellingly, 6% revealed how painful dealing

with BYOD is by answering, “This issue just

gives me a headache, and I’d really like it to

go away.” n

By Eric VandErBurg, spEcial to

nEtwork world

anderburg is a CISSP, and director

of Information Systems and Secu-

rity at consultancy JurInnov. This

vendor-written tech primer has

been edited by Network World to

eliminate product promotion, but readers should

note it will likely favor the submitter’s approach.

The bring your own device (BYOD) move-

ment formally advocates use of personal

equipment for work and obligates IT to

ensure jobs can be performed with an accept-

able level of security, but how can risks be

addressed given the range of devices used and

the fact that you lack control of the end point?

Companies looking to embrace BYOD --

44% of ﬁrms surveyed by Citrix say they have

a BYOD policy in place and 94% plan to imple-

ment BYOD by 2013 -- need to address four

key areas: 1) standardization of service, not

device, 2) common delivery methods, 3) intel-

ligent access controls and 4) data containment.

1. Standardization of service

Standardization is necessary to implement

a consistent set of security controls across dif-

ferent platforms while providing the same

level of service. Lack of compatibility with

security controls can deny legitimate users

access to information services and hurt pro-

ductivity. Solving this issue by adding more

access methods can result in weaker security

and make the environment more difﬁcult to

manage. Instead, companies can give users

the service they expect through desktop and

application virtualization technologies and

terminal servers.

Virtual desktops are hosted on a remote

server and emulate a desktop computer to

provide access to IT services, including appli-

cations and tools users need to do their job. As

long as they can connect to the server, users

can access their virtual desktop.

Through application virtualization, soft-

ware is streamed from a server to the end

users device, enabling users to access their

core business applications from a variety of

devices. Application virtualization does not

require software installation and applica-

tions can be upgraded from the server without

interfacing with remote or mobile devices. In

some cases, the application can be cached on

the device so it will function even when a con-

nection to the server does not exist.

Both virtualization options use termi-

nal server connections to access the remote

virtual desktop or application but terminal

servers can be used alone to provide consis-

tent access to IT services similar to desktop

virtualization. It differs from desktop virtual-

ization, however, in that the applications run

on the server operating system instead of a

virtualized one. Terminal servers are limited

in the services they can provide because not

all applications support terminal access and

some may behave differently on a terminal

than they would on a virtual desktop.

None of these solutions are new so their

security models are mature enough to be

relied upon for IT services. In fact, these tools

return control of end user devices to security

practitioners. Restrictions can be placed on

systems so the user can neither install other

applications nor change the system to intro-

duce vulnerabilities. Since all the activity is

performed remotely, the device used to con-

nect does not matter so employees can do their

job even if their primary computer is unavail-

able. Both terminal server and virtualization

剩余10页未读，继续阅读

tdxueli

粉丝: 1
资源: 157

第三方媒体解决BYOD策略探析

BYOD智能解决方案

思科 BYOD 智能解决方案

2013:云计算最终将解决BYOD的各种问题

BYOD解决方案v1.0

BYOD安全解决方案.pdf

BYOD安全解决方案.docx

cisco byod

制造业BYOD解决方案.pptx

制造业BYOD解决方案.pdf

制造业BYOD解决方案V1.pptx

最新资源