CISO: Banks need to carefully weigh pros, cons of MDM versus MAM
WASHINGTON, D.C.--Banks need to carefully weigh the pros and cons of deploying mobile device management versus mobile application management solutions when considering BYOD programs, advised Vas Rajan, chief information security officer at CLS Bank.
"On the other hand, mobile application management gets you out of the game of saying, 'we are going to manage the device which you bought' ... Mobile applications management is newer and has fewer enterprise proven options and additional costs to consider associated with it. There is also a higher configuration threshold in having to wrap your apps to enforce what you can and cannot download," Rajan added.
Kevin Thomsen, the director of client services for Citi's Cyber Intelligence Center, told the audience about a program Citi set up called Mobile App Store Monitoring.
There are a number of reasons that Citi set up this program. Compliance is one.
"We have standards for mobile app development and what needs to occur when things go live, but we decided to do a monitoring program as well to ensure" that marketing, security, and legal reviews of the apps take place before the app goes live.
"From a compliance standpoint, we are also highly interested in knowing when our apps are appearing on secondary app stores….We want to remove those apps from those secondary app stores," Thomsen said, adding that the Citi program currently monitors about 50 app stores, with another 30 in the pipeline. Another reason for the monitoring program is customer protection, he noted.