6.1.2.1

Secure Mobility

Mobile Device Management

Secure Mobility – Mobile Device Management – The organization using mobile devices (i.e., cellphones) shall educate users to:

a. disable automatic connections to open networks;

b. avoid connecting to untrusted Wi-Fi networks;

c. limit the use of Bluetooth and NFC for the exchange of sensitive information;

d. use corporate Wi-Fi or cellular data network connectivity rather than public Wi-Fi; and

e. use secure connectivity (VPN, Virtual Desktop etc.) when connecting to public Wi-Fi networks.

ISO 27001 Overlap

5.10 Acceptable Use of Information and Other Associated Assets: Define, document, and enforce rules for acceptable use and handling of information assets.

5.32 Intellectual Property Rights: Implement suitable procedures to safeguard intellectual property rights.

8.11 Data Masking: Utilize data masking in alignment with the organization’s access control policy and other relevant policies, along with business requirements, while considering applicable legislation.

8.19 Installation of Software on Operational Systems: Implement procedures and measures to securely manage software installation on operational systems.
NIST 800-171 R2 Overlap

3.1.18 Control connection of mobile devices.

3.1.19 Encrypt CUI on mobile devices and mobile computing platforms.

3.4.9 Control and monitor user-installed software.

3.13.4 Prevent unauthorized and unintended information transfer via shared system resources.
NIST 800-171 R3 Overlap

3.1.18 Control connection of mobile devices.

3.1.19 Encrypt CUI on mobile devices and mobile computing platforms.

3.4.9 Control and monitor user-installed software.

3.13.4 Prevent unauthorized and unintended information transfer via shared system resources.

Get certified

Contact us to get started today.