Equip the security team
BYOD: checking a personal phone before enrolling it in MDM
A personal phone comes with a history. When the organization allows BYOD, Shindan looks for indicators of compromise and vulnerability before granting it access, without touching the person’s private life.
Context
NIST points out that a personal device may be jailbroken or rooted, or infected without its user’s knowledge, and that an organization should consider any device untrusted until it has secured it and continuously monitors its security [1, §3.1.7 and §5.1.3.3]. CNIL, France’s data protection authority, asks organizations to assess the risks before allowing a personal device, and not to access private items stored in its personal space [2]. ANSSI, for its part, recommends not using personal mobile devices for work [3, p. 31]: when BYOD is tolerated, checking reduces the risk, without making BYOD a recommended practice.
What Shindan brings
The right product
Shindan SaaS with Shindan Mobile
The dashboard tracks the whole fleet; the iOS, iPadOS, and Android apps allow a scan at any time.
Frequently asked questions
Does Shindan replace MDM?
Does the user have to hand over their phone?
Does Shindan access photos or messages?
Other use cases
Executive travel
Before, during, and after a trip, look for signs of compromise on a phone in minutes, without reading the content of messages.
Regular checks of leadership phones
Executive committees are targeted by spyware. Regular scans look for signs of it, without taking the phone away from its user.
VIP support
A VIP is worried about their phone? Support gets a diagnosis in minutes, without keeping the device or reading their messages.
Spyware installed by someone close
Stalkerware can be installed by someone close. Shindan helps organizations look for signs of it, without exposing the person’s private life.
Remote triage
A phone seems compromised? The security team checks it remotely, without retrieving the device, with a detailed report for analysis.
CERT and CSIRT
Add smartphones to your incident response: Shindan Desktop analyzes iOS, iPadOS, and Android, with a graphical interface or from the command line.