Conducting a Risk Assessment for Mobile （进行风险评估为移动）.pdf

Conducting a Risk Assessment for Mobile Devices May 9, 2012 David Frei Director, Digital/Information Security Specialist Today’s Discussion  The Changing Environment  Available Industry Risk Assessment Models  Unique considerations when conducting a risk assessment for mobile devices  Understanding the business requirements and objectives  Assessing threats, vulnerabilities, impact to the business  Risk Response: Evaluating mitigation techniques  Monitoring the risks  A case study of a recent mobile device risk assessment Slide 2 The Changing Environment Slide 3 Consumerization of Technology Use of Smartphones in the Workplace 12% 25% Phone of Choice 63% Choice within a Predefined List Source: Symantec No Choice (March 2011) Slide 4 Increase in functionality/power 2004 2012 Slide 5 Increase in Downloaded Apps