Sponsored Content
Balancing security and efficiency
Q A
Q A
Q A
Through the Samsung Solutions Exchange, we work with mobile solution providers to enable unique and highly customized solutions on Samsung devices.
Why are we seeing a proliferation of mobile devices in government agencies?
Today’s government worker has
become accustomed to mobility through smartphone mobile applications in their everyday life. We have definitely seen an increase in the use of mobile devices by government agencies over the past few Johnny Overcast, Director years driven by more powerful and Government Sales, Samsung sophisticated smartphone technologies, operating systems and mobile devices management products. Samsung is addressing these challenges with Samsung Knox, a mobile security platform that enables agencies to approve Samsung devices for use in the enterprise.
Q A
Are commercial mobile devices ready to meet the security demands of government agencies?
Samsung has spent the past few years consulting with en-
terprise and government customers alike to track their priorities. We integrated their insights into our devices to address mobile security. Samsung Knox secures our devices from the hardware layer, through the operating system and into the application layer. A secure workspace leverages the protections of SE Android to provide enterprise data protection on the device and protect data in transit with a FIPS 140-2 certified VPN. Knox also provides integrity management at the hardware layer using Samsung-developed technology called TIMA, or TrustZone-based Integrity Management Architecture.
To what extent can mobility solutions be customized to meet specific program requirements?
When evaluating mobility solutions, there are two aspects to
consider: the software application that provides the solution and the device that enables a degree of customization, rendering and usability. At Samsung, we listen to our customers to understand their challenges then use all the tools at our disposal to solve a particular use case with mobile devices and solutions. The PM Nett Warrior program is a great example of that effort. The U.S. Army provides situational awareness for the warfighter using Samsung’s large-screen Galaxy Note smartphones, combined with a custom software solution.
Q A
What certifications are important when considering the purchase of mobile products in the government space?
Samsung devices have been approved by the U.S. Depart-
ment of Defense for use in DOD networks—a first for Android-powered devices. We have an approved Systems Technical Implementation Guide (STIG) approved by Defense Information Services Agency (DISA) and are the only manufacture to have gone through the National Information Assurance Program’s (NIAP) new Mobile Device Fundamental Protection Profile (MDFPP) evaluation, also known as Common Criteria. We currently have five devices—the most of any manufacturer—listed on DISA’s Approved Products List. Our devices are National Institute of Standards and Technology (NIST) Federal Information Processing Standards (FIPS) 140-2 certified. Why is mobile security such an important investment for agencies to make?
By making smart investments in mobile security an agency
can enable its workers to be more productive and responsive while still protecting their data. Today’s mobile worker expects access to their work when it is convenient, regardless of location. This pervasive mobility that allows users to roam globally, using networks and application stores that may be highly vulnerable to penetration, challenges the traditional security model. Devices have traditionally been protected behind the organization’s network security perimeter, but these devices are always-on and connected directly to the open Internet. This increases the risk profile for these devices, and the security infrastructure and posture needs to change to support this. Samsung works with customers to tailor solutions and products that enable mobility while addressing unique security challenges.
To learn more go to
www.samsung.com/us/enterprise
Sponsored Content
Going mobile: How to boost productivity and data integrity
Q A
Q A
Q A
ighter. Through the Samsung Solutions Exchange, we work with mobile solution providers to enable unique and highly customized solutions on Samsung devices.
What are the essential ingredients of a mobile security program?
An effective mobile security pro-
gram combines strategy, architecture, technology, policy and people to ensure security at every stage — from design to daily implementation. An enterprise strategy should encompass mobility and Johnny Overcast, Director security to maintain an acute level Government Sales, Samsung of awareness of the mobile environment and take control of it. Technical architecture should be designed to enable the business vision. Architecture and business strategy are then enabled through technology, including the mobile device management systems, app stores, cloud/server processing, secure end point devices and security auditing capabilities. To secure this technology, enterprises must establish a security policy, something that Samsung and its ecosystem of partners support ‘out of the box.’
Q A
Is it possible to enable employees to access both agency and personal resources on one device without compromising the security?
Yes, Samsung Knox provides the ability to have a secure workspace container that totally secures and cordons off government enterprise applications and protects from malicious attacks and data leakage. Government employees can use the ’personal’ side of the device as they wish without fear of altering the Samsung Knox container and its applications or content. Integrity of agency data is protected no matter how the device is used. With Samsung Knox, agencies have the technology to enable a Bring Your Own Device model or allow for personal use on government-owned devices.
What tools are available to help government customers that have custom mobile program requirements?
Samsung has a broad ecosystem of mobile solutions provid-
ers, and we have provided them with industry leading Software Developer Kits (SDKs) and various levels of developer support from our enterprise technical teams and R&D labs to enable unique and highly customized use cases. One example is our support of the PM Nett Warrior program. The U.S. Army uses the Galaxy Note line of smartphones as part of a solution that provides situational awareness for the warf-
Q A
What mobile security controls do the various government certifications address and why are they important?
Government certifications are important because they provide
assurance that certain aspects of security are being performed correctly. FIPS certifications address the strength of encryption solutions—the algorithms, key lengths, and implementations of the algorithms. The Mobile Device Fundamental Protection Profile (MDFPP) under the 26-country Common Criteria program addresses the robustness of security functions on mobile devices. The Virtual Private Network Protection Profile (VPNPP), also under Common Criteria, addresses the security of how VPN tunnels between the mobile device and enterprise are established, executed and torn down. The Department of Defense Security Technical Information Guide (STIG) is an annex to the National Information Assurance Partnership’s protection profile, and describes how users and IT departments should configure the capabilities to operate securely. Samsung mobile devices comply with FIPS 140-2, MDFPP, VNPP and STIG requirements.
To what extent can mobile solutions be integrated with the traditional work environment?
There are several ways to consider wireless integration in the
traditional work environment, or in the place of the traditional work environment. Within a more traditional office space, most of the products and tools available today are already connected or can be connected wirelessly. Wireless and mobile technologies can be integrated further into the workplace by leveraging capabilities that connect them to printers, displays and other IT products. Samsung is innovating in this arena at a tremendous pace, for example, providing the ability for mobile devices to connect via Near Field Communication (NFC) to our displays and other IT products.
To learn more go to
www.samsung.com/us/enterprise