One of the more deadly delusions in the IT world is that the systems administrator or security officer can somehow maintain control over the network and all the information in it. The fact is, though IT professionals create and enforce policy, end users' actions ultimately dictate how technology is used in the enterprise.
Securing Mobile Devices
Many executives, managers and even IT personnel carry handheld devices so they're never out of communication. These devices have consumer versions of software that handle e-mail synchronization using POP and even Microsoft Exchange. For better security, all enterprises must consider acquiring the enterprise software versions of these devices.
BlackBerry's BES (BlackBerry Enterprise Server), for example, gives systems administrators the flexibility and control they desire while providing the encryption necessary to achieve compliance with federal and state mandates. BES offers the option of using AES (Advanced Encryption Standard) or Triple-DES (Data Encryption Standard) to encrypt data sent from the messaging server to the handset. Additionally, BES lets systems administrators make changes to end users' handheld devices remotely. Devices can be entirely disabled, passwords can be changed and, in cases where the device is lost or stolen, data can be wiped from the device--all by remote administration.
If your corporation uses Treo devices, there are solutions for synchronizing e-mail over secure POP or Exchange synchronization, including third-party programs to send specially crafted text messages that will wipe the data from the device. Good Technologies offers a similar secure Exchange synchronization product for Palm OS and Windows Mobile users.
Christopher T. Beers is an NWC contributing editor and manager of systems operations for a large broadband ISP, where he oversees daily operations of high-speed data and VoIP for the Northeast United States, including Solaris and Linux administration. Write to him at [email protected].
