Company email on the phone is convenient but risky. Mobile device management (MDM) secures devices, separates private from business data and allows remote wipe.
Policies: device lock, encryption, minimum operating system version.
App distribution and control for company apps.
Separation: business data in protected areas, private stays private.
Remote wipe if lost, also of company data only.
Compliance checks: only compliant devices get access to company data.
Company device or private device?
With company devices the company can manage comprehensively. With private devices (BYOD) app protection that manages only company apps and their data is often enough, without controlling the whole device. This protects privacy and acceptance.
Rollout
Define goals and rules, agreed with data protection and, where applicable, the works council.
Check procedures per platform: Apple, Android.
Start a pilot group.
Inform employees: what does the company see and control, what not?
Define support and loss processes.
mobile device managementMDMmanage smartphonesIntune mobileapp protection
Frequently asked questions
What is MDM?
Mobile device management: central management and securing of smartphones and tablets, for example with policies, app control and remote wipe.
Can the company access private data?
With app protection the company manages only company apps and data. The scope should be communicated transparently.
Do I need MDM for company email on the phone?
Advisable, at least as app protection, so data is protected and can be deleted if lost.