Pub. 9 2020 Issue 1

13 s p r i n g | 2020 Save the Date! October, 18 ‐ 20, 2020 Roanoke, VA VACB 43rd Annual Convention & Trade Show Hotel Roanoke & Conference Center VACB & Williams Mullen 20th Annual Golf Tournament Monday, May 4, 2020 Spring Creek Golf Club Gordonsville F E A T U R E The key to ensuring security on these devices is to use amobile devicemanagement solution.Whenemployees need tohave access to sensitive information, adding the device to the mobile device manager will require certain security policies to be enforced. Set an Automatic Timeout Mobile devices should be set to auto- matically lock after a maximum of five minutes of inactivity. This will help secure devices that are left unattended. Encrypt Devices Some mobile devices come with built-in encryption, but some do not. It is best practice to encrypt all mobile devices and storage cards so that if it is lost or stolen, the information on them will not be accessible. Implement Remote Wipe Capabilities Another important feature that most mobile device management solutions support is the ability to remotely wipe a device. This is an important feature in the situation where a device is lost or stolen. The feature will allow you to delete the phone’s memory, which helps ensure confidential information is not disclosed. Wiping the device will also delete any personal information, such as pictures and text messages, so ensure all employees are made aware that if they misplace a device, it will be wiped. When implementing a mobile device management solution in a bring your own device environment, inform em- ployees of the requirements for bringing their own mobile device. This can be done in the on-boarding process and through acceptable use policies. Train employees to promptly report lost or stolen mobile devices so that they can be remotely wiped in a timely manner. Due to the nature of people staying con- nected to their work even when they are out of the office, the security aspect of using mobile devices cannot be neglect- ed. Using a mobile device management solution will help greatly to ensure that security controls are implemented and that they are enforced consistently across devices. Andrew Hettick is an Audit and Security Consultant for CoNetrix. CoNetrix is a technology firm dedicated to understanding and assisting with the information and cyber - security needs of community banks. Offerings include: infor- mation security consulting, IT/GLBA audits, security testing, cloud hosting and recovery solutions, and Tandem software, a security and compliance software suite designed to help financial institutions create and maintain their Information Security Programs. Visit our website at www.conetrix.com .