White Paper Evolution of Mobile Device Management to Tackle Enterprise BYOD Prepared by Berge Ayvazian Senior Consultant, Heavy Reading www.heavyreading.com on behalf of www.blackberry.com/mobilefusion August 2012 Table of Contents Executive Summary 3 BYOD Drives Enterprise Mobile Device Management 5 Next-Generation Mobile Device Management 7 RIM: Trusted Provider of Enterprise MDM & Security 9 BlackBerry Mobile Fusion to Manage Enterprise Smartphones & Tablets 10 BlackBerry Balance to Enable Dual-Identity BYO Mobile Devices 12 Assessment of MDM Solution Providers 13 BlackBerry Mobile Fusion Customer Case Study 15 Conclusion 17 HEAVY READING | AUGUST 2012 | WHITE PAPER | EVOLUTION OF MOBILE DEVICE MANAGEMENT FOR ENTERPRISE BYOD 2 Executive Summary The early days of mobile office were much simpler, at least for IT departments. Mobile workers needing access to corporate email and other enterprise applica- tions were all issued the same smartphone device, and it was likely to be a BlackBerry®. In most companies, corporate-liable BlackBerry smartphones were issued to a select subset of employees whose function and productivity required that they have continuous mobile access to corporate email, data and applica- tions. And for these mobile professionals, the security, reliability and manageability of these enterprise smartphones are considered a critical mission of their corpo- rate IT department. In the InformationWeek, 2012 Strategic Security Survey of 946 enterprise IT and security professionals at North American companies, 90 percent of respondents say they believe mobile devices pose a significant threat to their organizations' security now (69 percent) or that they will (21 percent). The No. 1 and No. 2 concerns: loss of a device that has access to sensitive information or an infected personal device connecting to the corporate network. Although the capabilities improved and the form factors of enterprise smartphones have evolved continuously as technology advanced over the past ten years, the constant gold standard for mobile device management (MDM) and security has been the highly reliable BlackBerry smartphone, global data network and the secure performance of the BlackBerry® Enterprise Server. With 250,000 BlackBerry Enterprise Servers and 78 million BlackBerry devices in use globally, RIM remains the dominant player in enterprise MDM, and BlackBerry Enterprise Server is by far the most widely deployed MDM solution. Figure 1 depicts the technical architecture of Traditional Enterprise Mobility in which corporate-liable BlackBerry smartphones are managed by a BlackBerry Enterprise Server and the responsibility for security and usage resided with enter- prise IT. With a BlackBerry-based mobile enterprise solution, security concerns are readily addressed with Enterprise Server, which provides a secure communication solution while offering features like: · Over-the-air BlackBerry device activation and resetting of device pass- words · Secure access to enterprise email, applications and data behind-the- firewall · Authentication and compliance with more than 550 corporate IT policies · Automated software and application distribution system · Highly secure and reliable mobile infrastructure · Tracking, locking, shutting down or wiping lost or stolen BlackBerry smartphones · Efficient MDM and control by corporate IT department These benefits of the BlackBerry Enterprise Server have until recently been limited to BlackBerry devices, leaving enterprises with limited options to offer their corpo- rate-liable smartphone users. This has become more problematic, as smartphone market share in the U.S. for the iPhone and Android customer base has been increasing over the past year. The increasing consumerization of mobility and HEAVY READING | AUGUST 2012 | WHITE PAPER | EVOLUTION OF MOBILE DEVICE MANAGEMENT FOR ENTERPRISE BYOD 3 company cost-saving measures have combined to pressure corporate IT depart- ments to accept the use of new personal mobile devices and applications inside the enterprise. Figure 1: Technical Architecture of Traditional Enterprise Mobility Source: Heavy Reading and BlackBerry Heavy Reading believes that "bring your own device" (BYOD) and MDM have emerged as critical issues for enterprises and the mobile industry. Enterprises that are implementing BYOD initiatives should start by deploying a next-generation mobile security solution to protect, control and connect BYO Android and iOS devices and a highly scalable MDM solution with an optimal set of features. HEAVY READING | AUGUST 2012 | WHITE PAPER | EVOLUTION OF MOBILE DEVICE MANAGEMENT FOR ENTERPRISE BYOD 4 BYOD Drives Enterprise Mobile Device Management Mobility has redefined the workplace as the boundaries between personal and professional life, home and office, business travel and in-office productivity are rapidly disappearing. The arrival of 4G and a myriad of new smartphones and tablets is resulting in mobile office "makeover." Today's mobile enterprise users are demanding more. Users want a seamless mobility experience that allows them to work anytime and anywhere, with the same productivity and performance they would get in a traditional corporate office. Management wants to keep increas- ing employee productivity, allow flexibility to work from anywhere and keep people in the field where they can close sales and stay close to the customer. With the increasing consumerization of enterprise mobility, the use of new personal smartphones devices and applications are being driven by company cost saving measures and the changing expectations of the digital generation. Many mobile workers are pressuring corporate IT to allow personal devices into the enterprise. Rather than carrying two devices for their new 24-hour day, users now want to select their own personal smartphones and use them for entertainment media and content consumption and to gain secure access to their enterprise email applications and corporate data. This is forcing enterprise IT departments to reassess their mobile user environments and the need to need to centrally manage Android and iOS devices while maintaining BlackBerry Enterprise Server capability is becoming more critical. If you add iPads and other connected tablets to this mix, the challenge becomes even greater. Many of the attractive productivity gains and cost savings of mobility are being threatened as enterprise IT departments are grappling with the security risk linked to the growing influx of personal smartphones and other mobile devices on the job. Employees across the corporate hierarchy look to use these tools for a range of activities, from staying connected and accessing work e-mail, to tap into corporate data and applications while on the go. We call this phenomenon the "enterprise mobility paradox." Although many of these same corporations offer most their valued employees a BlackBerry that is supported by a BlackBerry Enterprise Server, some employees resist having to carry a separate, "secure" smartphone. Corporate IT departments large and small are being asked to adopt policies that embrace a broader variety of personal mobile devices and CIOs now find themselves with a new challenge – balancing enter- prise security and uncontrolled costs often associated with the personal smartphones, tablets and other "bring your own devices" (BYOD) that are becom- ing an inseparable part of the lives of mobile workers. The InformationWeek 2012 Mobile Security Survey of 322 business technology decision-makers involved with MDM, policy development and/or security at North American companies shows an alarming number of organizations making "ad- justments" to their security policies in key areas based on the capabilities of the personal mobile devices allowed into the enterprise. Fully 86 percent of survey respondents permit use of personally owned devices now or are moving that way. These IT managers now need help to cope with the reality of personal smartphones in the enterprise workspace, and are taking an array of approaches to managing and securing employees personally owned mobile devices. But supporting BYO devices isn't as easy as traditional corporate-liable smartphones since they can't be managed by existing BlackBerry Enterprise Servers, and for some IT departments this is creating a security risk and a management nightmare. HEAVY READING | AUGUST 2012 | WHITE PAPER | EVOLUTION OF MOBILE DEVICE MANAGEMENT FOR ENTERPRISE BYOD 5 Heavy Reading and InformationWeek define "enterprise-ready" mobile operating systems as those that have been purpose built to provide effective authentication, encryption and enterprise management controls that adequately protect business data. Figure 2 highlights the wide disparity in personally and company-owned mobile devices that are now being allowed to access and store corporate data. On the left are depicted the increasingly popular consumer-grade personal smartphones that are being introduced into the enterprise, often without the benefit of centralized policies, end-to-end security, or server-based device management and monitoring. It is challenging for corporate IT departments to ensure quality and reliability of BYOD performance. Figure 2: Contrasting Enterprise & Personal Consumer Smartphones & Tablets Source: Heavy Reading BlackBerry is the undisputed poster child for "enterprise class" because RIM baked security into the BlackBerry OS, smartphones and BlackBerry Enterprise Server management system. Both Android and iOS were designed for use in consumer devices, while BlackBerry