Governance, Risk, Compliance and Mobility

1
Governance, Risk, Compliance and Mobility
May 21, 2009

• Paul DeBeasi
• Senior Analyst, Burton Group
• pdebeasi_at_burtongroup.com

2
AGENDA

• Panel introduction
• Dean Alms, VP Strategy, Visage Mobile
• Matt Carrier, Mobility Evangelist, Sybase
  iAnywhere
• David Goldschlag, CTO, Trust Digital
• Wade Williamson, Director Product Management,
  AirMagnet
• Introductory remarks governance, risk,
  compliance
• Panel discussion
• Audience questions (Save your questions!)

3
Mobility governance

• Use policy
• Ownership policy
• Security policy
• Service definition
• Cost management
• Organization
• Regulatory

• Ready Fire Aim

4
Security risk mitigation
What, me worry?
The answer is NO!
5
Regulatory compliance

• Payment Card Industry Data Security Standard
• Health Insurance Portability and Accountability
  Act
• European Data Protection Directive
• Gramm Leach Bliley Act
• Sarbanes-Oxley Act
• Canadian Data Privacy
• Civil e-discovery procedures

6
Panel discussion

• Mobility governance
• Use policy
• Ownership policy
• Security risk mitigation
• Regulatory compliance

Don't forget to save your questions
7
Governance Use PolicyPermissive versus
restrictive

• Do permissive policies really increase risk?
• Do restrictive policies really reduce risk?
• What is wrong with making policy exceptions?
• How do age demographics affect use policy?
• Is the notion of IT control a lost cause?

8
Governance Ownership policyEnterprise versus
user

• Is device ownership really a big deal?
• What is the impact on device management?
• What is the impact on device security?
• What is the impact on application deployment?
• How should enterprises tackle this issue?

9
Security risk mitigation

• Describe the importance of user education
• Is device encryption really necessary?
• Explain loss/theft mitigation techniques
• Best practices for user/device authentication?
• Who should control software update process?
• Will tools/technology outpace vulnerabilities?

10
Regulatory compliance

• What specific requirements does PCI impose on an
  enterprise?
• What type of technologies tools can help
  enterprises ensure regulatory compliance?
• What process-oriented policies can help ensure
  compliance?

11
AUDIENCE QUESTIONS
12
THANK YOU!
Free report Enterprise mobility at a
crossroads (Drop off business card)

• Paul DeBeasi
• Burton Group
• pdebeasi_at_burtongroup.com