Guidelines for Managing the Security of Mobile Devices in the Enterprise

Souppaya, Murugiah; Scarfone, Karen

doi:https://doi.org/10.6028/NIST.SP.800-124r1

SP 800-124 Rev. 1

Guidelines for Managing the Security of Mobile Devices in the Enterprise

Documentation Topics

Date Published: June 2013

Supersedes: SP 800-124 (11/03/2008)

Author(s)

Murugiah Souppaya (NIST), Karen Scarfone (Scarfone Cybersecurity)

Abstract

The purpose of this publication is to help organizations centrally manage and secure mobile devices against a variety of threats. This publication provides recommendations for selecting, implementing, and using centralized management technologies, and it explains the security concerns inherent in mobile device use. The scope of SP 800-124 Revision 1 includes securing both organization-provided and personally-owned (bring your own device) mobile devices.

Keywords

cell phone security; information security; mobile device security; mobility; remote access; smartphone security; tablet security; telework

Control Families

Access Control; Configuration Management; Media Protection; Planning; System and Communications Protection; System and Information Integrity; System and Services Acquisition

Documentation

Publication:
SP 800-124 Rev. 1 (DOI)
Local Download

Supplemental Material:
SP 800-124 Rev. 1 (EPUB) (txt)
Press Release (other)

Document History:
06/21/13: SP 800-124 Rev. 1 (Final)

Topics

Security and Privacy
acquisition; planning

Technologies
mobile

Applications
communications & wireless; enterprise; telework

Laws and Regulations
Health Insurance Portability and Accountability Act; OMB Circular A-130