登录查看更多内容

How can you implement a zero-trust security model in your enterprise mobility management (EMM) policies?

由人工智能和领英社区提供技术支持

Zero-trust security is a paradigm that assumes no device, user, or network is inherently trusted and requires continuous verification and authorization for accessing resources. This approach can help enterprises enhance their mobility management policies and protect their data from breaches and attacks. In this article, you will learn how to implement a zero-trust security model in your enterprise mobility management (EMM) policies.

此文章中的业界达人

由社区从 12 条内容中精选。了解更多

1 What is EMM and why does it need zero-trust security?

EMM is a set of tools and processes that enable enterprises to manage and secure their mobile devices, applications, and data. EMM includes mobile device management (MDM), mobile application management (MAM), mobile identity management (MIM), and mobile content management (MCM). EMM allows enterprises to enforce policies, monitor compliance, and remotely wipe or lock devices in case of loss or theft. However, EMM alone is not enough to prevent cyberattacks that exploit vulnerabilities in devices, networks, or users. Zero-trust security can help EMM policies to be more granular, adaptive, and resilient to threats.

添加您的观点

Tirthankar Dutta

CIO & CISO Disney Star and Disney India at The Walt Disney Company | Forbes Technology Council Member | Top Information Security Voice | Top Risk Management Voice | Patent Holder | CISSP | CISA | CISM
举报内容
Implementing a zero-trust security model in enterprise mobility management (EMM) policies involves adopting a holistic approach to security that assumes no trust, even within the corporate network perimeter. Here's how you can implement a zero-trust security model in your EMM policies: Device Authentication and Authorization User Authentication and Authorization Continuous Monitoring and Risk Assessment Data Encryption and Data Loss Prevention (DLP) Containerization and Secure Containers By implementing these strategies, organizations can strengthen their EMM policies and adopt a zero-trust security model that provides comprehensive protection against evolving security threats in today's mobile-centric environment.

已翻译

赞
Ravindra Annam

Cybersecurity Professional specializing in AppSec, SAST, DAST, SCA, Threat Modelling, SSDLC, API Security, , DPP,Cloud Security, AI/ML and LLM Security | Container Security, DevSecOps, & Pen testing
举报内容
Implementing a zero-trust security model within enterprise mobility management (EMM) policies involves adopting a comprehensive approach that prioritizes continuous verification and strict access controls. Begin by establishing strict identity verification protocols, employing multifactor authentication and device attestation. Utilize micro-segmentation to limit lateral movement within the network, encrypting data both at rest and in transit. Regularly audit and update policies to adapt to evolving threats and ensure compliance. Additionally, deploy behavioral analytics and AI-driven anomaly detection to swiftly identify and respond to potential breaches, thereby fortifying your EMM infrastructure against internal and external threats.

已翻译

赞
Douglas Morais
举报内容
No entanto, o EMM por si só n?o é suficiente para evitar ataques cibernéticos que explorem vulnerabilidades em dispositivos, redes ou usuários. A seguran?a de confian?a zero pode ajudar a complementar as políticas de EMM, tornando-as mais granulares, adaptáveis e resilientes a amea?as.

已翻译

赞
Christopher Zarcone

Distinguished Engineer - Security Architecture at Comcast
举报内容
Zero Trust de-emphasizes computer networks as trust factors, and instead places more emphasis on the identity of security principals - users, devices, and resources. ZT also places emphasis on policy compliance. In terms of devices, EMM can help with both identity and compliance. With EMM you can gain reasonable (never say "perfect") assurance that a device is appropriate credentialed; that a device has all of the organization's desired security tooling on it; that a device is compliant with organizational policy. But question #1 is incorrectly phrased. EMM doesn't "need" Zero Trust. When applied with Zero Trust principles in mind, EMM becomes a foundational element of your Zero Trust architecture. Big difference.

已翻译

赞
Bruno Barbalho

Head de Seguranca da Informacao | Coordenador | Especialista | Ciber Seguranca | MSS | SOC | MXDR | LGPD | GDPR | Gest?o de Riscos | Gest?o de Vulnerabilidades | Threat Intelligence |
举报内容
é essencial adotar uma abordagem baseada na autentica??o multifatorial e na verifica??o contínua da identidade do usuário e do dispositivo. Isso inclui a implementa??o de políticas de acesso granulares com base no contexto, como localiza??o e comportamento do usuário. Além disso, é crucial utilizar tecnologias de criptografia e de segmenta??o de rede para proteger os dados em transito e em repouso, garantindo assim uma postura de seguran?a robusta em toda a infraestrutura de mobilidade empresarial.

已翻译

赞

加载更多内容

2 How to apply the principles of zero-trust security to EMM policies?

The principles of zero-trust security rely on the concept of "never trust, always verify". To apply these principles to EMM policies, enterprises should verify the identity, health, and compliance of every device that connects to their network or resources. This can be done through certificates, multifactor authentication, device encryption, and endpoint detection and response (EDR) tools. For users, single sign-on (SSO), multifactor authentication, role-based access control (RBAC), and contextual policies should be used to verify identity, role, and context. Additionally, encryption, segmentation, firewall, and network access control (NAC) tools should be used to verify security and integrity of networks that transport data or applications. Furthermore, data should be verified for sensitivity, location, and usage by using encryption, classification, data loss prevention (DLP), and audit tools. Finally, encryption, sandboxing, code signing, and application security testing tools should be used to verify functionality, performance, and security of applications. Devices that do not meet the security standards should be denied access or quarantined until remediated. Users should only be granted the minimum level of access necessary for their tasks and should be revoked when no longer needed. Data should be protected at rest, in transit, and in use and tracked for any unauthorized or inappropriate access. Applications should be vetted for any vulnerabilities or malware and updated regularly.

添加您的观点

Deepa Ajish

Vice President | ServiceNow Transformation & Automation Leader | Security & Compliance | IT Security Strategist | Judge | Coach | Mentor
举报内容
In today's AI and ML world, we can automate Context Collection and Response. Leverage automation to collect context about users, devices, and their behavior. Use this context to make informed access decisions and respond dynamically to security events.

已翻译

赞
Fernando Andreazi

Cyber Security Sales Executive
举报内容
Os princípios da seguran?a de confian?a zero, baseados no conceito de "nunca confiar, sempre verificar", s?o aplicados às políticas de EMM através da verifica??o da identidade, integridade e conformidade de cada dispositivo. Certificados, autentica??o multifator, criptografia de dispositivo e EDR s?o utilizados para isso. Para usuários, SSO, autentica??o multifator, RBAC e políticas contextuais s?o empregados. Em redes, criptografia, segmenta??o, firewall e NAC garantem a seguran?a e integridade. Dados s?o verificados por sensibilidade, localiza??o e uso, usando criptografia, classifica??o, DLP e auditoria. Aplicativos s?o testados com criptografia, área restrita, assinatura de código e ferramentas de teste de seguran?a.

已翻译

赞

3 How to implement a zero-trust security model in EMM policies?

Implementing a zero-trust security model in EMM policies requires a systematic and iterative process. Enterprises should assess their current EMM policies and mobile device, user, network, data, and application inventory. They should also plan their zero-trust security strategy and define their goals, objectives, and metrics. Additionally, they should deploy their zero-trust security tools and processes and integrate them with existing EMM policies. Furthermore, they should review their strategy and policies to evaluate their outcomes and impacts. It is important to repeat the process of assessment, planning, deployment, and review on a regular basis to adjust their strategy and policies accordingly. Communication, training, and awareness campaigns should also be repeated to keep stakeholders and users informed and engaged.

添加您的观点

4 Here’s what else to consider

This is a space to share examples, stories, or insights that don’t fit into any of the previous sections. What else would you like to add?

添加您的观点

Victorianne Musonza, JD, CIPP, CIPM, CISA, CISSP

Privacy Counsel | Commercial Counsel | Technology Transactions Attorney | SaaS & AI Compliance | Data Privacy & Cybersecurity
举报内容
Implementing a zero-trust security model in EMM involves strict access controls regardless of location or user device. Key considerations include robust authentication methods, continuous monitoring for anomalies, encrypted data transmission, and granular access permissions. Additionally, enforcing device compliance with security policies and regularly updating security measures are vital.

已翻译

赞
Bruno Barbalho

Head de Seguranca da Informacao | Coordenador | Especialista | Ciber Seguranca | MSS | SOC | MXDR | LGPD | GDPR | Gest?o de Riscos | Gest?o de Vulnerabilidades | Threat Intelligence |
举报内容
é importante realizar uma avalia??o regular de vulnerabilidades nos dispositivos móveis e nos aplicativos corporativos, além de implementar solu??es de gerenciamento de amea?as móveis para detectar e responder a potenciais ataques. A educa??o e conscientiza??o dos usuários sobre as melhores práticas de seguran?a em dispositivos móveis também s?o fundamentais para fortalecer a seguran?a em um ambiente de confian?a zero. Por fim, é crucial manter-se atualizado com as tendências e evolu??es em seguran?a móvel para adaptar continuamente as estratégias e mitigar novas amea?as.

已翻译

赞

Information Security

+ 关注

给文章评分

我们借助人工智能创建了此文章。您认为这篇文章怎么样？

很棒不太好

举报此文章

查看全部

How can you implement a zero-trust security model in your enterprise mobility management (EMM) policies?

1

2

3

4

1 What is EMM and why does it need zero-trust security?

2 How to apply the principles of zero-trust security to EMM policies?

3 How to implement a zero-trust security model in EMM policies?

4 Here’s what else to consider

Information Security

给文章评分

感谢您的反馈

更多Information Security相关文章

更多相关阅读内容

How can you implement a zero-trust security model in your enterprise mobility management (EMM) policies?

1

2

3

4

1 What is EMM and why does it need zero-trust security?

2 How to apply the principles of zero-trust security to EMM policies?

3 How to implement a zero-trust security model in EMM policies?

4 Here’s what else to consider

Information Security

给文章评分

感谢您的反馈

查看其他技能