Enterprise application security management strategy

1. © 2013 Tangoe, Inc.
Enterprise Application Management:
2014 and Beyond
Presented by:
Troy Fulton, Director, Product Marketing
November 13, 2013

2. © 2013 Tangoe, Inc.
Today’s Speaker
2
Troy Fulton
Director, Product Marketing
• Senior product marketing and management positions with global
corporations including Motorola Mobility, Nokia, and Compaq
• MBA from The College of William and Mary; BA from Boston
College

3. © 2013 Tangoe, Inc.
Agenda
• 2014 is THE year of Mobile Applications
• What is a Mobile Application?
• Use Case Examples
• Challenges to Overcome
• Containerization
• Virtualization
• App Management Execution Roadmap
• Recommendations
3

4. © 2013 Tangoe, Inc.
2014: Year of Mobile Enterprise Apps
• Enterprise mobility in 2014 driven by mobile enterprise applications (Ovum)
– Enterprise mobile apps take off
▪ Become a core part of the enterprise IT application stack
▪ Gartner: HTML5 and the browser dominate enterprise app development
▪ Developers expand UI models
− Integrate richer voice and video connecting people in new ways
− Mobile apps will grow while the number of applications shrink
• Enterprise mobility not a mobility or device problem
– IT corporate management problem
– Implications for secure access, content, application, and BI
• Business process transformation is next
– Mobility, creating new ways of working, and transforming
– Workers perform core tasks (beyond email) from any device, anywhere
– Organizations have begun this, in early adoption.
4

5. © 2013 Tangoe, Inc.
What is a “Mobile Web App?”
5

6. © 2013 Tangoe, Inc.
Mobile App Use Case Examples
6

7. © 2013 Tangoe, Inc.
Mobile App Challenges
• Mobile strategies mature…slowly
– Expands the range of apps offered to employees…mobilize the enterprise app stack
– MDM solutions provide strong mobile app lifecycle management tools
– Enterprise app store is a legitimate conduit
– Containerization offers white-list enforcement
• Challenge….getting the UX right
– Need a consumer-grade user experience with business class reliability
– Enterprises, will pay a guaranteed sum, then
look for apps to be developed & iterated
– Failure results in loss of ROI, data breach,
and trust erosion
• BYOD & BYOA are linked (of course)
• BYOA is widespread, and is a threat (Ovum)
▪ Cloud productivity apps: enterprise social
networks, file sync & share, and VoIP
–
• 7

8. © 2013 Tangoe, Inc.
Back-End Integration – The Critical Path
• Enterprise mobile apps rely on real-time integration to back-end systems
– Ability to view performance indicators and drill down
• Mobile apps & users
– “Unstructured” knowledge content
▪ External content, results, diverse insights, internal content and collaboration outputs…
– Integrated with portal solutions (i.e., SharePoint or SAP portal)
▪ Collaborative action among businesses and developers
• Enterprise mobile “mashups”
– Apps integrated with backend systems to expose actionable insights
– Mobile users can respond in real-time
• Consumer mashups
– Combines data from public sources via the browser
• So what?
– Mobility matters when connected to meaningful apps and data
– Access control, identity management, and data security are critical
– Cloud-based availability means enforce your ecosystem security requirements
8

9. © 2013 Tangoe, Inc.
Mobile Apps Drive Corporate Policy
• Mobile value unlocked via apps
– Beyond email to line-of-business-specific apps
– Enterprise multi-screening
– Provide the right tools respective to device
– Secure app wrapping and VPN
– Whitelist and blacklist apps
▪ Difficult to keep up
▪ Containerization for high value data
▪ MDM can monitor, alert and enforce
– Secure data and encourage the right behavior
• “Great” app considerations
– Usability
– Secure but not invasive
– Focused on a specific task
– Extensibility
– “Integratibility”
– Manageability
– Multi-platform
9

10. © 2013 Tangoe, Inc.
A Note on Privacy
• Plan and test for privacy
– Geographic considerations
• What is disabled?
– Roaming?
– Application monitoring?
▪ Installed
▪ Usage
– Device usage monitoring
▪ Voice
▪ SMS
▪ Data
10

11. © 2013 Tangoe, Inc.
Protection Against BYOA – Device Containers
11

12. © 2013 Tangoe, Inc.
What is in a Container?
12

13. © 2013 Tangoe, Inc.
Factors That Drive Selection and Deployment
• What functions will the user
perform?
• What apps are needed?
• Value of data?
• Offline or only on-line?
• What data must be accessed
or generated?
• Where must the data reside?
• What platforms must be
supported?
• UX vs. federal/state regulation
compliance
13

14. © 2013 Tangoe, Inc.
Application Virtualization Options
• No re-development of existing
app required
• Native gestures
• Fine-grained, offset mouse
• Rapid deployment
• High performance
Mobilize Existing App
• Each application has its own
workspace
• Easy navigation between
applications
• Single Sign On (SSO)
• New applications easily added
Workspace Aggregation
• New custom applications using
preferred development tools
• Easy integration with existing
applications and data sources
• Instant deployment for HTML5
apps
• SDK for native / hybrid
development
New Custom Apps

15. © 2013 Tangoe, Inc.
Virtualization Can Enable Agility
15
Application Portfolio Wireless Network Impact
Security Compatibility
• All applications can
be mobilized
• No code changes required
• Handles random loss, latency
and wireless interference
• Great performance and user
experience over any network
• Write once, run anywhere
• Independent of client device,
OS or browser
• No data on end device
• Full centralized policy
management

16. © 2013 Tangoe, Inc.
Mobile Application Management – Execution Roadmap
16

17. © 2013 Tangoe, Inc.
Final Recommendations
• Define the objectives and the metrics
– Identify the most pressing needs in terms of the users, apps, and devices
– Define a pilot to determine what’s feasible and what’s not
• Understand requirements and dependencies
– Security as enabler....not power over enforcer
– Does not mean skimp on security
▪ Consider monitor and respond respective to employee and data value vs. lock it down
– Do we need to keep data on the device? If so, how can we protect it?
– How do we distribute the app and its updates?
– Do we need to support personalization?
17

18. © 2013 Tangoe, Inc.
Near Future
• BYOD users demand consumer UI experience at work
– Accelerates real-time communication and collaboration
• HTML5: ubiquitous mobile internet catalyst
– Anyone can deliver an app
• Forrester: the web is on borrowed time
– “App Internet” will offer a “faster, simpler and better Internet experience”
• Real-time communication, coordination and community
– Achieve effective data sharing, coordination and social interaction
– Break corporate silos by leveraging mobile collaboration tools…think personal cloud
• Workspace aggregators
– Technology for combining user applications (from all sources) and data into 1 presentation
– Enable business process efficiency
• Take the lead, or be led by your users
– Enterprise agility is not marketing hype
18

19. © 2013 Tangoe, Inc.
Questions and Contacts
Contact information:
Troy Fulton
Troy.Fulton@Tangoe.com
Tangoe
203.859.9300
info@tangoe.com
www.tangoe.com