{"id":75303,"date":"2020-03-25T07:42:19","date_gmt":"2020-03-25T05:42:19","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/vchera-bylo-nelzya-a-segodnya-nuzhno-kak-nachat-rabotat-udalenno-i-ne-stat-prichinoj-utechki"},"modified":"2020-03-25T07:42:19","modified_gmt":"2020-03-25T05:42:19","slug":"vchera-bylo-nelzya-a-segodnya-nuzhno-kak-nachat-rabotat-udalenno-i-ne-stat-prichinoj-utechki","status":"publish","type":"post","link":"https:\/\/prohoster.info\/en\/blog\/administrirovanie\/vchera-bylo-nelzya-a-segodnya-nuzhno-kak-nachat-rabotat-udalenno-i-ne-stat-prichinoj-utechki","title":{"rendered":"Yesterday it wasn't possible, but today it is: how to start working remotely without causing a data leak?","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Overnight, remote work has become a necessary and sought-after format. This is all due to COVID-19. New measures to prevent infection are introduced every day. Temperatures are taken in offices, and some companies, including large ones, are transitioning employees to remote work to minimize losses from downtime and sick leave. In this sense, the IT sector, with its experience in managing distributed teams, comes out ahead.<\/p>\n

At the Research Institute of SOCB, we've been organizing remote access to corporate data from mobile devices for several years and know that remote work is a complex issue. Below, we will explain how our solutions help manage employees' mobile devices securely and why this is crucial for remote work.
\n\"Yesterday
\n<\/a><\/noindex><\/p>\n

What does an employee need to work remotely?<\/h2>\n

\nThe standard set of services that need to be provided for remote access for full work capabilities includes communication services (email, messenger), web resources (various portals, such as service desk or project management systems), and files (electronic document management systems, version control, etc.).<\/p>\n

One cannot hope that security threats will wait until we finish combating the coronavirus. Remote work has its security rules that must be followed even during a pandemic.<\/p>\n

Important business information should not simply be sent to an employee's personal email so they can read and process it on their personal smartphone. Smartphones can be lost, malicious apps can be installed, and eventually, children who are home due to the virus may play with the device. Therefore, the more critical the data an employee works with, the better it should be protected. And the protection of mobile devices should be no less stringent than that of stationary ones.<\/p>\n

Why is antivirus and VPN not enough?<\/h2>\n

\nFor stationary workstations and laptops running Windows OS, installing antivirus is a justified and necessary measure. However, for mobile devices, this is not always the case.<\/p>\n

Apple's device architecture prevents informational interaction between applications. This limits the potential scale of consequences from malware: if a vulnerability in the email client is exploited, actions cannot extend beyond that email client. At the same time, such a policy reduces the effectiveness of antivirus software. It is no longer possible to automatically check a file that has arrived via email.<\/p>\n

On the Android platform, both viruses and antivirus software have more prospects. However, the question of feasibility still arises. To install malware from the app store, many permissions must be manually granted. Access rights are only obtained by users who allow apps everything. In practice, it is enough to prohibit users from installing applications from unknown sources so that 'cracks' for freely installed paid applications do not turn into 'treatments' for corporate secrets regarding confidentiality. But this measure goes beyond the functions of antivirus software and VPN<\/a>.<\/p>\n

Moreover, VPNs and antivirus software cannot monitor how the user behaves. Logic suggests that there should be at least a password installed on the user device (as protection against loss). But the presence of a password and its reliability depend solely on the user's awareness, which the company cannot influence.<\/p>\n

Of course, there are administrative methods. For example, internal documents that state employees will be personally responsible for the lack of passwords on devices, installing applications from untrusted sources, etc. It is even possible to require all employees to sign an amended job description containing these points before starting remote work. But let's face the truth: the company will not be able to check how this instruction is implemented in practice. It will be busy with emergency restructuring of basic processes, while employees, despite the implemented policies, will be copying confidential documents to their personal Google Drive and sharing links for easier collaboration on the document.<\/p>\n

Therefore, the sudden shift to remote office work is a test of the company's resilience.<\/p>\n

\"Yesterday
\n<\/p>\n

Corporate Mobility Management<\/h2>\n

\nFrom an information security perspective, mobile devices pose a threat and a potential breach in the protection system. Solutions in the EMM (enterprise mobility management) class are designed to close this breach.\u00a0<\/p>\n

Corporate Mobility Management (EMM) includes functions for managing devices (MDM, mobile device management), their applications (MAM, mobile application management), and content (MCM, mobile content management).<\/p>\n

MDM is the necessary 'stick'. With MDM features, an administrator can wipe or block a device if it's lost, set security policies: password complexity and requirements, disable debugging features, prevent installations from APKs, etc. These basic capabilities are supported on mobile devices from all manufacturers and platforms. More fine-tuned settings, such as preventing the installation of custom recoveries, are only available on devices from certain manufacturers.<\/p>\n

MAM and MCM are the 'carrot' in the form of applications and services that they provide access to. By ensuring sufficient security through MDM, secure remote access to corporate resources can be provided via applications installed on mobile devices.<\/p>\n

At first glance, it seems that application management is purely an IT task, reduced to basic operations like 'installing an application, configuring an application, updating an application to a new version, or rolling it back to a previous one.' In reality, security is still a concern here. It is not just about installing and configuring necessary applications on devices for work, but also safeguarding corporate data from being uploaded to personal Dropbox or Yandex.Disk.<\/p>\n

\"Yesterday
\n
\nTo separate corporate and personal data, modern EMM systems offer to create a container for corporate applications and their data on the device. Users cannot unauthorizedly extract data from the container, so the security service does not need to prohibit 'personal' use of mobile devices. This is actually beneficial for business. The more adept users are with their devices, the more effectively they will use their work tools.<\/p>\n

Let's return to IT tasks. There are two tasks that cannot be solved without EMM: rolling back an application version and its remote configuration. A rollback is necessary when the new version of the application does not satisfy users\u2014there are serious bugs or it is simply inconvenient. In the case of applications in Google Play and the App Store, rollback is impossible\u2014the store always provides only the latest version of the application. With active internal development, versions can be released almost daily, and not all of them turn out to be stable.<\/p>\n

Remote configuration of applications can be realized even without EMM. For example, different builds of the application can be created for different server addresses, or a settings file can be saved in the public memory of the phone for manual changes later. All this occurs, but it can hardly be called best practices. Meanwhile, Apple and Google offer standardized approaches to solving this task. For the developer, it is sufficient to embed the necessary mechanism once, and the application will be able to configure any EMM.<\/p>\n

We bought a zoo!<\/h2>\n

\nNot all scenarios for using mobile devices are equally useful. Different categories of users have different tasks, and these need to be addressed in their own ways. Developers and financial analysts require specific sets of applications and possibly sets of security policies due to the varying confidentiality of the data they handle.<\/p>\n

It is not always possible to limit the number of models and manufacturers of mobile devices. On one hand, it turns out to be cheaper to establish a corporate standard for mobile devices than to deal with the differences between Android devices from various manufacturers and the peculiarities of mobile UI display on screens with different diagonals. On the other hand, purchasing corporate devices during the pandemic becomes complicated, and companies have to allow the use of personal devices. The situation in Russia is further exacerbated by the presence of national mobile platforms that are not supported by Western EMM solutions.\u00a0<\/p>\n

All this often leads to a situation where instead of a single centralized solution for managing corporate mobility, a disparate zoo of EMM, MDM, and MAM systems is exploited, each serviced by its own personnel under unique rules.<\/p>\n

What are the specific features in Russia?<\/h2>\n

\nIn Russia, as in any other country, there is national legislation on information protection that does not change depending on the epidemiological situation. Thus, in state information systems (GIS), protective measures certified according to security requirements must be implemented. To meet this requirement, devices accessing GIS data must be managed using certified EMM solutions, one of which is our product SafePhone.<\/p>\n

\"Yesterday
\n<\/p>\n

Long and complicated? In fact, it is not.<\/h2>\n

\nEnterprise-level tools like EMM are often associated with slow implementation and lengthy pre-project preparations. There is simply no time for that now\u2014virus-related restrictions are enforced quickly, so there\u2019s no time to transition to remote work.\u00a0<\/p>\n

From our experience, having implemented many projects for deploying SafePhone in companies of various sizes, even with local deployment, the solution can be launched within a week (not counting the time for agreement and contract signing). Regular employees can start using the system just 1\u20132 days after implementation. Yes, to customize the product flexibly, administrators need training, but this training can be conducted concurrently with the start of system operation.<\/p>\n

To save time on installation in the client's infrastructure, we offer our clients a cloud-based SaaS service for remote management of mobile devices using SafePhone. Moreover, we provide this service from our own data center, certified to comply with maximum requirements for GIS and personal data information systems.<\/p>\n

As a contribution to the fight against coronavirus, the Research Institute of Impact Methods is connecting small and medium-sized businesses to the server free of charge. SafePhone<\/a><\/noindex> to ensure the safe work of employees operating remotely.
\n
Source: habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 \u043e\u0434\u043d\u043e\u0447\u0430\u0441\u044c\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u0430\u044f \u0440\u0430\u0431\u043e\u0442\u0430 \u0441\u0442\u0430\u043b\u0430 \u0432\u043e\u0441\u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0438 \u043d\u0443\u0436\u043d\u044b\u043c \u0444\u043e\u0440\u043c\u0430\u0442\u043e\u043c. \u0412\u0441\u0435 \u0438\u0437-\u0437\u0430 COVID-19. \u041d\u043e\u0432\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0449\u0435\u043d\u0438\u044e \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u0438\u044f \u043f\u043e\u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u043a\u0430\u0436\u0434\u044b\u0439 \u0434\u0435\u043d\u044c. \u0412 \u043e\u0444\u0438\u0441\u0430\u0445 \u0438\u0437\u043c\u0435\u0440\u044f\u044e\u0442 \u0442\u0435\u043c\u043f\u0435\u0440\u0430\u0442\u0443\u0440\u0443, \u0430 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u043a\u0440\u0443\u043f\u043d\u044b\u0435, \u043f\u0435\u0440\u0435\u0432\u043e\u0434\u044f\u0442 \u0440\u0430\u0431\u043e\u0442\u043d\u0438\u043a\u043e\u0432 \u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043a\u0443, \u0447\u0442\u043e\u0431\u044b \u0441\u043e\u043a\u0440\u0430\u0442\u0438\u0442\u044c \u043f\u043e\u0442\u0435\u0440\u0438 \u043e\u0442 \u043f\u0440\u043e\u0441\u0442\u043e\u044f \u0438 \u0431\u043e\u043b\u044c\u043d\u0438\u0447\u043d\u044b\u0445. \u0418 \u0432 \u044d\u0442\u043e\u043c \u0441\u043c\u044b\u0441\u043b\u0435 IT-\u0441\u0435\u043a\u0442\u043e\u0440 \u0441 \u0435\u0433\u043e \u043e\u043f\u044b\u0442\u043e\u043c \u0440\u0430\u0431\u043e\u0442\u044b \u0440\u0430\u0441\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u043a\u043e\u043c\u0430\u043d\u0434 \u0432 \u0432\u044b\u0438\u0433\u0440\u044b\u0448\u0435. […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":75304,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-75303","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Yesterday it was impossible, but today it is essential: how to start working remotely without becoming a leak risk? | ProHoster","description":"Overnight, remote work became a sought-after and necessary format. All thanks to COVID-19. New infection prevention measures emerge every day.","canonical_url":"https:\/\/prohoster.info\/en\/blog\/administrirovanie\/vchera-bylo-nelzya-a-segodnya-nuzhno-kak-nachat-rabotat-udalenno-i-ne-stat-prichinoj-utechki","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"en_US","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412\u0447\u0435\u0440\u0430 \u0431\u044b\u043b\u043e \u043d\u0435\u043b\u044c\u0437\u044f, \u0430 \u0441\u0435\u0433\u043e\u0434\u043d\u044f \u043d\u0443\u0436\u043d\u043e: \u043a\u0430\u043a \u043d\u0430\u0447\u0430\u0442\u044c \u0440\u0430\u0431\u043e\u0442\u0430\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0438 \u043d\u0435 \u0441\u0442\u0430\u0442\u044c \u043f\u0440\u0438\u0447\u0438\u043d\u043e\u0439 \u0443\u0442\u0435\u0447\u043a\u0438? | ProHoster","og:description":"\u0412 \u043e\u0434\u043d\u043e\u0447\u0430\u0441\u044c\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u0430\u044f \u0440\u0430\u0431\u043e\u0442\u0430 \u0441\u0442\u0430\u043b\u0430 \u0432\u043e\u0441\u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0438 \u043d\u0443\u0436\u043d\u044b\u043c \u0444\u043e\u0440\u043c\u0430\u0442\u043e\u043c. \u0412\u0441\u0435 \u0438\u0437-\u0437\u0430 COVID-19. \u041d\u043e\u0432\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0449\u0435\u043d\u0438\u044e \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u0438\u044f \u043f\u043e\u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u043a\u0430\u0436\u0434\u044b\u0439 \u0434\u0435\u043d\u044c.","og:url":"https:\/\/prohoster.info\/en\/blog\/administrirovanie\/vchera-bylo-nelzya-a-segodnya-nuzhno-kak-nachat-rabotat-udalenno-i-ne-stat-prichinoj-utechki","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-03-25T05:42:19+00:00","article:modified_time":"2020-03-25T05:42:19+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"75303","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 17:58:34","updated":"2026-02-04 14:42:02","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/posts\/75303","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/comments?post=75303"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/posts\/75303\/revisions"}],"predecessor-version":[{"id":156726,"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/posts\/75303\/revisions\/156726"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/media\/75304"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/media?parent=75303"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/categories?post=75303"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/tags?post=75303"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}