BYOD Webinar for SAP: Securing Data in a Mobile World
1 like1,127 views
The document discusses the challenges and implications of the Bring Your Own Device (BYOD) trend in the workplace, emphasizing the need for improved data security as mobile usage increases. It outlines the benefits of BYOD for both employees and enterprises, including flexibility and cost reduction, while also highlighting significant security concerns and the inadequacies of current protective measures. It presents Secude's approach to secure data management within BYOD environments, advocating for a data-centric protection strategy.
BYOD Webinar for SAP: Securing Data in a Mobile World
- 1. © 2014 SECUDE AG | © 2014 SECUDE AG | WWW.SECUDE.COM BYOD Webinar for SAP Securing Data in a Mobile World
- 2. © 2014 SECUDE AG | Speakers 2 Michael Kummer President Americas, SECUDE Aparna Jue Technical Product Manager, SECUDE
- 3. © 2014 SECUDE AG | Agenda ! Mobility & BYOD trends and what they mean for you ! Mobility & BYOD challenges ! Current approach and why it’s failing ! What else can be done? A look at new technologies 3 1 2 3 4
- 4. © 2014 SECUDE AG | About SECUDE 4 1996 Startup of Secude, Spin-Off from Fraunhofer & SAP 2000 SAP partnership (world-wide deployment of SECUDE SNC-SW) 2001 Market entry file/folder encryption 2002 Market entry Smartcard Management and E-SSO 2004 Startup of SECUDE USA 2005 Market entry Full Disc Encryption (FDE) 2006 Launch of FinallySecure Enterprise with Seagate (HW-based FDE) 2011 Spin-off of SECUDE’s SAP Security products to SAP AG 2011 Re-focus on endpoint protection & later SAP NetWeaver Single Sign-On 2012 Halocore initiative to bridge MS AD RMS with SAP
- 5. © 2014 SECUDE AG | ! 83% of people sleep next to their cell phones (Pew Research Center) ! 29% of Americans say their phone is the first and last thing they look at every day (Qualcomm) Mobility Goes Boom St. Peter's Square in 2005 and 2013
- 6. © 2014 SECUDE AG | 4.38% 14.79% 24.02% 27.21% 29.59% Mobility Landscape Other NO CONSENSUS ON OPERATING SYSTEM DEVICE OBSESSION 86% are device obsessed or “always on” 44% use their devices to work during meals 20% consider themselves workaholics 15% bring their devices on vacation Source: Varonis Systems
- 7. © 2014 SECUDE AG | What is “Bring Your Own Device”? ! Bring Your Own Devices enables users to bring devices they choose to perform company work activities ! Employees want BYOD for choice of device, applications, and ability to combine personal and work lives BYOD means any device with any ownership, used anywhere.
- 8. © 2014 SECUDE AG | There is No Stopping BYOD ! The BYOD market will increase to $181 billion by 2017 (MarketsandMarkets) ! 95% of organizations permit employee-owned devices (Cisco IBSG) ! 71% require technology that enables their staff to work anywhere at any time (Microsoft) ! 70% of employees use personal devices for business use (Forrester)
- 9. © 2014 SECUDE AG | Why They BYOD: Benefits to Employees Flexibility: No hassle with one device to combine work and personal activities Efficiency: Can get more done with my own device Control: Can have greater control of my work experience through choice of device
- 10. © 2014 SECUDE AG | Why They BYOD: Benefits to Enterprises Cost reduction: Annual benefits from BYOD range from $300 to $1300 per employee (Cisco IBSG) Productivity: 53% have raised work productivity through innovative practices enabled by their devices (Cisco IBSG) Employee satisfaction: Employees feel more comfortable while working on personal devices, which improves their job satisfaction levels.
- 11. © 2014 SECUDE AG | This is What We are Facing End-User Behavior • Over 15 billion devices by 2015, with average worker with 3 devices • New workspace: anywhere, anytime • 60% will download sensitive corporate data on a personal device • 71% of Gen Y workforce don’t obey policies IT Trends • Must control multiple devices and guests • Security: top concern for BYOD • 75% of IT professionals believe their organization’s sensitive data is at risk due to mobile devices • IT consumed with fragmentation Source: Logicalis
- 12. © 2014 SECUDE AG | Issues in BYOD ! Security issues ! Privacy issues ! Support issues ! Infrastructure issues ! Device control issues
- 13. © 2014 SECUDE AG | Bring Your Own DISASTER 9 out of 10 employees don’t use password security on their devices (Osterman Research) 51% have had data loss due to insecure devices (Websense) 81% admit accessing their employer’s network without their employer’s knowledge or permission (Juniper Network) 46% who use a personal device for work have let someone else use It (Harris Poll of US Adults) 66% who use a personal device for work say that their organization doesn’t have a BYOD policy (Harris Poll of US Adults)
- 14. © 2014 SECUDE AG | Main BYOD Security Concerns 7% 23% 29% 37% 44% 47% 65% 75% 0% 10% 20% 30% 40% 50% 60% 70% 80% Other Support & Maintenance Compliance with industry regulations Device management Lost or stolen devices Malware infections Unauthorized access to company data and systems Loss of company or client data Source: Lumension
- 15. © 2014 SECUDE AG | Data is Most Valuable Resource Apps $ Devices $$ Data $$$$$$$$$ Secure your data, not apps or devices 3 key factors
- 16. © 2014 SECUDE AG | Storing Data 37% 12% 8% 51% 42% 11% 0% 10% 20% 30% 40% 50% 60% Keep work files on personal laptops Store work files on personal smartphones Keep enterprise documents on personal tablets All Workers Millenials
- 17. © 2014 SECUDE AG | ! Corporate perimeter is eroding/has eroded ! Knowing where your data has become a challenge ! Keeping track is next to impossible ! Let’s not forget: data exists to be consumed ● So locking everything down and disallowing employees to productively use data is counter-productive The IT Challenge File Server Employees Partner
- 18. © 2014 SECUDE AG | Questions?
- 19. © 2014 SECUDE AG | Existing Security Technologies 19
- 20. © 2014 SECUDE AG | ! Firewall ● Protects the (eroded) perimeter ! DLP ● Monitoring § Good to understand where data is going § Problem is wealth of information it produces ● Prevention § Too far away from where data is born § Doesn’t know the context § Frustrates users § Often switched off ! VPN ● Protects data in transit only Network-centric Solutions
- 21. © 2014 SECUDE AG | ! FDE ● Power-off protection ● Good if you lose device or it’s stolen ● No protection for data-in-use ! Database encryption ● Good to protect against unauthorized users ● Complex and high maintenance ! Mobile device encryption ● Why that’s not possible § iOS devices come with built-in HW-based encryption § App sandboxes prevents encryption of app data Storage-centric Solutions
- 22. © 2014 SECUDE AG | ! File-encryption (PGP…) ● Key/password management issues ● Protection is gone once file is unlocked/decrypted ! Rights Management (DRM, IRM à RMS) ● Capabilities of IRM § Protection = encryption + policy § Control who can open, edit, print, copy/paste… § Expiration date ● Established IRM solutions § Adobe § Oracle (SealedMedia) § Microsoft Data-centric Solutions
- 23. © 2014 SECUDE AG | Data-centric protection Industry leading Microsoft Rights Management technology Access Control Encryption Policy Enforcement Unauthorized User Trusted Partner 23
- 24. © 2014 SECUDE AG | Data is Protected ! Inside and outside the organization ! At a single location u And when moving amongst various locations Partner On premise Shared
- 25. © 2014 SECUDE AG | Fine-grained Control ! Content owners can define who can ● Open the document ● Edit the contents ● Print the document ● Forward to anyone, internal or external ● Take other actions with the information
- 26. © 2014 SECUDE AG | Questions?
- 27. © 2014 SECUDE AG | Halocore for SAP NetWeaver ! Innovative: Enforces RMS protection on all data leaving SAP ! Secure: Determines what users are authorized to access sensitive data ! Customizable: Offers fine-tuned control over who can do what with information (view, edit, print, forward, etc.) ! Flexible: Works for any file type ! Powerful: Protection persists beyond SAP, including mobile platforms
- 28. © 2014 SECUDE AG | Comprehensive Approach 1. Protection 2. Compliance 3. Audit
- 29. © 2014 SECUDE AG | Demo
- 30. © 2014 SECUDE AG | Where to Start? ! Data Export Auditor for SAP ● Free tool to monitor all data leaving SAP ● Each and every download is tracked ● Intelligent classification ● Request download at www.secude.com 30
- 31. © 2014 SECUDE AG | Auditing Capabilities - Customizing your view
- 32. © 2014 SECUDE AG | Auditing Capabilities - The Log File
- 33. © 2014 SECUDE AG | Questions?
- 34. © 2014 SECUDE AG | Visit us at www.SECUDE.com Tweet us @SECUDE 6/27/14 34
- 35. © 2014 SECUDE AG | Aparna Jue Technical Product Manager www.secude.com SECUDE IT Security, LLC Alpharetta, GA USA
- 36. © 2014 SECUDE AG | Copyright SECUDE AG © 2014 All rights reserved. All product and service names mentioned are the trademarks of their respective companies. No part of this publication may be reproduced or transmitted in any form or for any purpose without the express written permission of SECUDE AG. The information contained herein may be changed without prior notice. Microsoft, Windows, and Active Directory are the brand names or registered trademarks of Microsoft Corporation in the United States. 6/27/14 36