Risk Assessment of Mobile Security & Technology Mr Barry D Lewis, CISSP, CISM, CGEIT, CRISC lewisb@cerberus-isc.com This is trial version www.adultpdf.com Agenda WHERE IS MOBILE GOING? MANAGING RISKS SYSTEM CHARACTERIZATION THREATS & VULNERABILITIES CONTROL ANALYSIS LIKELIHOOD – IMPACT - RISK CONTROL RECOMMENDATIONS Web Sites This is trial version www.adultpdf.com Where is Mobile Going? • Mainframe to Client Server to Mobile This is trial version www.adultpdf.com Where is Mobile Going? • Steps to using technology This is trial version www.adultpdf.com Where is Mobile Going? • TESCO’s Home Plus store in Korea • Tested recreating the layout of a typical supermarket in a subway station • Used images of products that each included a QR code • Commuters could browse the 'aisles', pick the items they wished to purchase by snapping an image of the relevant barcode and then checkout from their phone • Their shopping basket was then delivered to their home at the end of the working day This is trial version www.adultpdf.com Where is Mobile Going? • We Care Home Health Services • Is a leading national provider of in-home care and support services with over 50 locations across Canada, provides professional and compassionate care that allows seniors and others to live independently in the comfort of their own homes • A customized application that allows front line, traveling homecare staff (including personal support workers, health care aides and nurses) to access information and support on their mobile device • If a frontline worker does not confirm they have completed their shift within 15 minutes of their scheduled end time, STAR Track prompts the office to call and check on the client and front line worker’s safety This is trial version www.adultpdf.com Where is Mobile Going? • Verizon Partner Solutions (VPS) – 2,250 field technicians and managers replace laptops with Blackberry smartphones – Offers increased portability, speed, simplicity – Provides cost savings over deploying laptops This is trial version www.adultpdf.com Where is Mobile Going? • Lloyds Construction – A demolition and carting company – The company employs 12 drivers, 22 foremen, and seven office workers who use 41 phones running eTrace Courtesy: http://money.cnn.com/2008/03/11/smbusiness/mobile_phone_software.fsb/index.htm This is trial version www.adultpdf.com Where is Mobile Going? • Business Applications This is trial version www.adultpdf.com Managing Risks • • • • Know what you have Establish a process for risk management Define vulnerabilities Establish Controls This is trial version www.adultpdf.com System Characteristics • What we mean by “mobile technology” • Define this for your organization – “technology that allows data and applications to move beyond our servers and workstations” – “portable technology that provides readily accessible data ” • What exactly does it include? – How many of each? Hardware & software This is trial version www.adultpdf.com System Characteristics • Operating Systems – – – – – 68 iOS 555 Android 33 BlackBerry 650 Windows XP 250 Windows • Devices – – – – – Apple RIM HTC Samsung Sony • Other Devices – USB memory sticks • xx approved • xx unapproved – – – – Portable printers Portable Scanners CD or DVD disks Cameras? • Video • Still This is trial version www.adultpdf.com ...Agenda WHERE IS MOBILE GOING? MANAGING RISKS SYSTEM CHARACTERIZATION THREATS & VULNERABILITIES CONTROL ANALYSIS LIKELIHOOD – IMPACT - RISK CONTROL RECOMMENDATIONS Web Sites... http://money.cnn.com/2008/03/11/smbusiness /mobile_ phone_software.fsb/index.htm This is trial version www.adultpdf.com Where is Mobile Going? • Business Applications This is trial version www.adultpdf.com Managing Risks • • •... www.adultpdf.com Where is Mobile Going? • TESCO’s Home Plus store in Korea • Tested recreating the layout of a typical supermarket in a subway station • Used images of products that each included