Best Practice Detail
13-8-8645
Network Operators should set policy that requires any sensitive information transmitted to or from the employee mobile device be encrypted and/or transferred with a secure data transfer utility. Use of a secure connection or protocol, such as SSL, that guarantees end-to-end encryption of all data sent or received should be included in policy. Devices with wireless capability pose an additional risk of unauthorized access and tampering. These capabilities should be disabled, secured, or protected with a firewall.
Status: Rollover New
References/Comments: Source: http://www.k-state.edu/its/security/procedures/mobile.html
Historical events:
- Network Operators
- Wireless
- Cyber Security
- Hardware
- Encryption
- CSRIC VII: Rollover New In CSRIC VII
