AN EMM CHECKLIST FOR CIOs. Factors to Consider When Choosing an EMM Solution. Whitepaper

Transcription

1 1 AN EMM CHECKLIST FOR CIOs Factors to Consider When Choosing an EMM Solution Whitepaper

2 2 An EMM Checklist for CIOs As you decide on an Enterprise Mobility Management (EMM) solution, there are dozens, if not hundreds, of factors to weigh. Comparing features across three or four shortlisted solutions can become incredibly time-consuming. As a starting point, consider the issues in the following list. It s derived from third-party research and best practices. While not exhaustive, it covers the critical areas you ll need to think through as you arrive at a decision. You may also want to review our CIO s Guide to EMM, which addresses the same topics, and others, in more detail. Managing devices, policies and security Mobile Application Management Thinking about all the key factors Thinking about all the key factors will will help you arrive at a solution help you arrive at a solution that best that best fits your business. fits your business. Mobile Content Management Reporting, monitoring, compliance Total Cost of Ownership (TCO) Support and value-added services Enterprise Integration Support and value-added services

3 3 Managing devices, policies and security Mobile Device Management (MDM) is at the heart of any EMM solution, even as new terms and acronyms join the mix almost weekly. When it comes to device management and security, does the solution you re considering: Support the devices your employees want and need? Separate personal and corporate content and data on the same device? Allow you to easily manage multiple devices per user? Provide on-device and in-transit encryption? Control which applications are installed, through whitelisting, and provide protection against non-approved applications? Give you quick visibility into which apps are being downloaded and send alerts to IT, managers and users about violations? Monitor/control access to web services and app stores? Detect policy violations (like using data while roaming) and initiate action if required e.g. disabling access? Restrict or prohibit access to your servers in case of policy violations? Support Multi-Forest Active Directory and console-based directory group sync? Have device migration tools built into the management console? Allow IT to set user profiles for activation, SSO and proxy settings? Limit the number and type of devices? Set policy and device controls based on device ownership model? Provide a streamlined deployment experience across multiple servers and domains? Enable advanced auditing of users and administrators? Provide remote log collection for advanced troubleshooting? Offer an enhanced custom enterprise app store? Offer an enhanced custom enterprise app store? Provide a self-service portal for end user device management tasks?

4 4 When it comes to device management and security, does the solution you re considering: Provide advanced gatekeeping to control access to Microsoft Exchange ActiveSync by device? Control how devices connect to your corporate network (corporate Wi-Fi, VPN, etc.)? Consolidate traffic through a single outbound port? Manage and deploy certificates? Allow users to connect securely to access resources behind your firewall? Enable full device control and logging if/where required? Provide Data Leak Prevention (DLP) by ensuring work content can t be exported outside the work container? Allow remote wipe with the ability to choose what to wipe (corporate-only vs. total device wipe)? Give you control over local data encryption (for example, internal phone memory or data storage cards housed in the device)? Let you enforce password use (so that you can control the complexity and rotation)? Let you specify how long a device can be inactive before it automatically locks? Enable certificate-based authentication? Allow you to monitor/enforce what s in use e.g. operating systems and versions, installed applications, latest patches and critical updates? Detect jailbreaking and rooting on ios, Android and Windows Phone devices? Control, automatically, what happens next when devices are found to be non-compliant? Give you control over how corporate apps are managed on personal devices (and vice versa, if required)?

5 5 You also need the details on the solution s: Third-party security approvals and certifications e.g. Federal Information Processing Standard [FIPS] Interaction with your corporate firewall and antivirus software VPN requirements and capabilities Message archiving capabilities, for compliance, audit trails and reporting Containerization approach (there are five main strategies which one best suits your security requirements?) Ability to provide out-of-the-box access to corporate , GAL, PIM, Intranet and apps Ability to securely deploy and manage custom and/or third-party apps Zooming out to look at the bigger security picture, you ll want to determine whether the solution will: Safely enable all the ownership model scenarios you may need it to e.g. BYOD, COBO, Corporate Owned and COPE Support all the user segments/groups in your organization (versus a one-size-fits-all security approach) Allow your organization to comply with any and all regulations or government legislation (if applicable) Allow you to manage all devices and endpoints through a single pane of glass

6 6 Mobile Content Management Organizations that see the strategic, long-term value in mobility know that the real advantages are in apps. Desktop apps, where data resides behind the corporate firewall, have been driving business for years now, and making those apps move literally is where it s at. Does the solution enable: Simplified app management for both optional and required apps, including silent installation? Integration with the Apple Volume Purchasing Program (VPP), including support for multiple VPP accounts? Deployment of single app packages across multiple device platforms from the console? Simple and secure app-wrapping for third-party apps with no additional development effort? Advanced app management features including app blacklisting, per-app VPN control, and SSO for ios? Comprehensive lifecycle management of apps across ios, Android, Windows Phone and BlackBerry devices? Finding and deploying apps from major app stores including the Apple App Store and BlackBerry World? Advanced compliance management of apps, with dashboard reporting? Deploying apps through a custom enterprise app store, with both required and optional apps, by individual employee or group? Security certifications that meet your standards for secure work containers on all relevant devices? App deployment tracking and installation statistics within the dashboard? Policies to automatically and selectively wipe apps and app data, including documents, when users or devices fall out of compliance?

7 7 Mobile Content Management Now more than ever, Mobile Content Management (MCM) is critical to everyday business. Does the solution allow: Secure connectivity and access to shared network drives behind the firewall and to Microsoft SharePoint repositories? Segregation of all work content from personal apps and data? Secure browsing of intranet and other content behind the firewall? Automatic encryption of attachments that employees can open and modify on-the-go? Setting of content download restrictions (e.g. for roaming)? Scalability Some solutions make it much easier than others to roll out and sustain enterprise-sized deployments. Can you grow without having to increase server and infrastructure investments? How many devices can be added per domain? Does the solution include high availability and disaster recovery options? Does the vendor provide published scalability benchmarks? Implementation Is the solution flexible enough to meet your needs? For example: Does it come in both on-premises and cloud (SaaS) versions? How hard will it be to get up and running? What support can you access if you need or want help at the deployment stage or even earlier, as you plan your migration? Are the licensing options appropriate for your needs? Does it come from a vendor you know and trust?

8 8 Reporting and Monitoring Does the solution help you understand what s happening at a glance, through: Dashboards (providing quick visual views of what s going on across your deployment)? Reporting (including the ability to export results for further analysis)? Here s an example of what leading EMM solutions may enable via reporting: Devices out of contact The number of days that have passed since devices last contacted the server. Device compliance state A breakdown of issues detected on devices in your organization. Devices by carrier A breakdown of the number of devices by wireless service provider in your organization. Devices by platform A breakdown of the number of devices by platform in your organization. Top five mobile devices The five most common mobile device models in your organization. Top five apps deployed The five most common applications deployed by your organization. Device activations A dynamic representation of the devices activated each month in your organization over a 12-month period. Total Cost of Ownership (TCO) Along with ROI, it s one of the items at the top of every CIO s list of priorities when it comes to EMM. Does the solution: Allow you to get up and running quickly, even with limited or non-existent IT resources? Reduce complexity, optimize pooled resources and ensure maximum uptime? Allow you to leverage your existing investment in mobility technology? Allow the scalability you may need? Offer secure connectivity regardless of device (or are additional VPN costs a factor)? Provide proven technical support to ensure maximum uptime and fast issue resolution? (see more on support on next page) Fit with your IT help desk strategies and capabilities?

9 9 Support and Value-Added Services Does the solution: Include full end-to-end support (rather than limited help desk support only)? Offer users a self-service portal, to lighten the load on IT and your help desk while empowering employees? Provide support for all the devices under management, as well as the solution itself? Flex to fit with your unique needs? Integrate with existing and/or new enterprise services you have or may require in the near future? Have global reach to support any and all relevant languages, locations and remote workers? Come with flexible options to support your migration planning, implementation, and post-install ramp-up? Enterprise Integration Does the solution provide: System health diagnostics? End-to-end, secure integration of 3rd party mobile solutions? LDAP secure directory service integration, including Microsoft Active Directory, IBM Domino Directory, Novell GroupWise edirectory and all LDAP-based directories? An SNMP interface for integration with existing data center monitoring infrastructure? Mobile device auditing and archiving integration?

10 10 Wrapping up Deciding on an EMM solution isn t easy. You need to satisfy many requirements, from all parts of the business. You need a solution that offers the security you require at an organizational level, and also at the individual level (the CFO versus an intern, for example). And at the same time, you need to make sure that security doesn t get in the way of productivity and collaboration. You ll have to find a solution that s priced right for your needs without compromising on performance. You must consider the path to your new solution too the services and support you need to make the migration, and the ability to leverage, where possible, any MDM tools you have in place today. If you have limited IT resources, you will want to strongly consider a cloud solution. And you need to make sense of the deluge of information you ll receive throughout your decision-making process. We hope this list is a helpful start, and again, please check out our detailed CIO s Guide To EMM for more on these business-critical topics.

11 11 To find out more and to sign up for a free 30-day BES12 trial, head to blackberry.com/bes day Free Trial Offer: Limited time offer; subject to change. Limit 1 per customer. Trial starts upon activation and is limited to 50 Gold BlackBerry subscriptions and 50 Secure Work Space for ios and Android subscriptions. Gold BlackBerry subscriptions can be interchangeably used for Silver level activation of BlackBerry 10, ios, Android, Samsung KNOX and Windows Phone devices. Following trial, customer must purchase subscriptions to continue use of product. Not available in all countries. Subscriptions can be purchased direct or from authorized resellers. When a system is upgraded to production, the trial subscriptions will no longer be available. This Offer is void where prohibited and is subject to modification, extension or early termination at BlackBerry s sole discretion. ios is a registered trademark of Cisco Systems, Inc. and/or its affiliates in the U.S. and certain other countries. ios is used under license by Apple Inc. Apple Inc does not sponsor, authorize or endorse this brochure. Android is a trademark of Google Inc. which does not sponsor, authorize or endorse this brochure BlackBerry. All rights reserved. BlackBerry, BBM and related trademarks, names and logos are the property of BlackBerry Limited and are registered and/or used in the U.S. and countries around the world. All other trademarks are the property of their respective owners.