NIST makes ‘major’ changes to mobile device security guidelines

guest · Apr 8, 2020

NIST makes ‘major’ changes to mobile device security guidelines
April 7, 2020
https://www.fedscoop.com/nist-mobile-device-security-guidelines/

That the National Institute of Standards and Technology released its revised mobile device security guidelines during a time of increased telework is purely coincidental — but also fortuitous.

The guidelines hadn’t been updated since 2013, and much has changed across the enterprise mobile device landscape in those seven years, Gema Howell, IT security engineer at NIST, told FedScoop.

“This is really focused on device-side threats, considerations and things you can do on the device,” Howell said.
The authors made “major” changes to the threat landscape section, mapping high-level threats to NIST’s Mobile Threat Catalogue while also addressing privacy implications, Howell said.
Click to expand...

Mobile applications are increasingly problematic because they can allow adversaries attack vectors to sensitive information, especially the more apps there are on a device, she added.
Authors also addressed how mobile authentication is no longer simply a four-digit personal identification number but can involve biometrics that users might not even be aware exist.

NIST also added a second step to the mobile device deployment lifecycle: performing a risk assessment.
Click to expand...

The draft document is open to public comment through June 26, 2020, after which NIST will review feedback and update the guidelines before releasing either a second or final version.
Click to expand...

Draft NIST Special Publication 800-124 Revision 2
Guidelines for Managing the Security of Mobile Devices in the Enterprise
(PDF): https://doi.org/10.6028/NIST.SP.800-124r2-draft

This publication assists organizations in managing and securing these devices by describing available technologies and strategies. Security concerns inherent to the usage of mobile devices are explored alongside mitigations and countermeasures.
Click to expand...

Log in or Sign up

NIST makes ‘major’ changes to mobile device security guidelines

guest Guest

Log in or Sign up

NIST makes ‘major’ changes to mobile device security guidelines

guest Guest

Useful Searches