Overview

Sensitive, propriety, and/or classified data loss occurs when a lost, stolen, or damaged handheld devices(PDA) is not regularly synchronized with an organizational computer or network. Data synching over a network, without encrypted sessions, could lead to sniffing and spoofing attacks.

Data loss also occurs when attackers gain physical or logical access to PDAs and perform unauthorized modifications or inject arbitrary code. If such attacks go unnoticed for any length of time, forensics data could prove invalid and security controls ineffective.

Profit-oriented and sophisticated attacks against handheld devices increase each year. According to McAfee, manufacturers have reported increases against all threat categories:

• Network or service capacity issues
• Virus/spyware infections
• Voice or text spam attacks
• Third party application/content problems
• Loss of user data from devices
• Phishing attacks in any form
• Privacy and regulatory issues
• Denial of service attacks

Key Benefits

1. Reduces the risks involved in loss of data      and Confidential information.

2. Reduce cost of damage due to attacks of        malicious content (Bots, malware, spyware   Greyware,pharming,rootkits,and keyloggers.

3. COE Security helps customers in maintaining data security on PDAs, ipads, iphones and other smart phones.

Methodology

Our solution covers, reviewing and auditing of the following

1. Administrative Controls

1. Security Policy- Organizational goals, objectives, modes of operation, permitted devices, authentication and authorization levels for the devices, and etc.
2. Acceptable Use Policy- AUP signed users, encryption levels, password protection.
3. Insurance policy

2. Technical Controls

1. Configuration management
2. Access control
3. Anti-virus software
4. Data encryption
5. Firewall
6. Virtual Private Network
7. Device Integrity
8. Centralized Management
9. Device Backup

3. Physical Security