iPad security case study: Are we there yet?

By Tom Kaneshige, CIO |  Security, ipad

In the world of the iPad, though, end users are in charge. A handful of Bank of the Ozarks iPad users began storing data in consumer apps and services such as Dropbox. "We actually had some users that were, um, testing that out, you can say," says Steve Due, senior network engineer at Bank of the Ozarks. "We wanted to catch that up front and cut it off."

In order to blacklist a popular consumer app, Bank of the Ozarks needed to offer an alternative to Dropbox that was just as easy to use. If the enterprise alternative is more complicated, iPad users will simply default to the consumer app despite policies telling them not to do so. (Bank of the Ozarks has a user policy that prohibits the use of certain consumer apps on the iPad.)

Bank of the Ozarks looked to an emerging app from GroupLogic, called activEcho, to be the alternative storage app on the iPad. It's an enterprise file sharing product that integrates with Active Directory and supports secure file transfers, thus keeping data on Bank of the Ozarks servers and network.

But activEcho was still in beta, and CIOs traditionally shun new products and startups. In the fast-moving world of tablets and mobile computing, CIOs have to shed some of this thinking in order to keep up. Bank of the Ozarks spent three months as a beta tester.

A Sandbox Approach to Security

GroupLogic unveiled activEcho last week on the same day Quickoffice launched Quickoffice ProSelect HD, an iPad app that lets users work with Word documents, Excel spreadsheets and PowerPoint slides. The two apps are important because they work together to prevent data leakage on the iPad.

From the end user perspective, here's how it works: A Bank of the Ozarks employee can launch activEcho on the iPad and gain access to, say, a Word document residing on the corporate network. But the only option to open the Word document is in Quickoffice, not any of the other Office-like iPad apps such as Pages, Office2 HD and Docs to Go.

Once inside Quickoffice, the employee can view and edit the document. When it comes time to save the document, the employee simply has the SaveBack Only option, whereby the file saves back to the original source, such as a Sharepoint access point behind the firewall. (Quickoffice ProSelect also doesn't allow users to copy and paste outside the Quickoffice app.)

"We're creating a virtual sandbox between cooperating vendors," says Derick Naef, CTO of GroupLogic.

Slideshow: 15 Best iPhone Apps for Busy CEOs

Originally published on CIO |  Click here to read the original story.
Join us:






Answers - Powered by ITworld

Ask a Question