NIST’s National Cybersecurity Center of Excellence (NCCoE) is seeking industry comments on its newly released draft guidance for corporate-owned personally enabled (COPE) mobile devices.

 

Mobile devices bring unique threats to the enterprise that need to be addressed in a manner distinct from traditional desktop platforms, NIST says. This includes securing against different types of network-based attacks on devices that generally have an always-on connection to the internet, malicious or risky apps that compromise the data that devices can access, and phishing attempts that try to collect user credentials or entice a user to install software. Additionally, the guide addresses how to reduce risks to individuals through privacy protections.

NIST’s National Cybersecurity Center of Excellence and its industry collaborators built an example solution demonstrating how organizations can use a standards-based approach and commercially available technologies to meet their security and privacy needs for using mobile devices to access enterprise resources.

The NIST Cybersecurity Practice Guide demonstrates how organizations can use standards-based, commercially available products to help meet their mobile device security and privacy needs.

The guidance was drafted in collaboration with several security stakeholders including Palo Alto Networks, Lookout, Kryptowire, and Qualcomm, among others. NIST is accepting industry comment until September 23, 2019.