This document outlines steps for evaluating a mobile threat defense solution, including defining important requirements, success criteria, planning a trial, and validating findings. It recommends aggregating industry best practices, listing objectives to prioritize and score solutions, executing a 30-day trial on 5-20 devices to collect threat data and assess user experience, and talking to references to confirm the evaluation process and results. The goal is to thoroughly test solutions and choose one that protects against all mobile threat vectors and meets critical requirements.

1. Title of Presentation DD/MM/YYYY© 2016 Skycure Inc. 1
Webinar Tools for Evaluating a
Mobile Threat Defense Solution

2. Title of Presentation DD/MM/YYYY© 2016 Skycure Inc. 2
Quick Housekeeping
• There will be time for Q&A at the end
• Ask questions using the GTW chat pane
• The webinar is being recorded
• All attendees will receive a copy of the slides/recording
Join the discussion #MobileThreatDefense

3. Title of Presentation DD/MM/YYYY© 2016 Skycure Inc. 3
Meet Your Speaker
Mic McCully
Sr. Solutions Consultant,
Skycure

4. Title of Presentation DD/MM/YYYY© 2016 Skycure Inc. 4
Agenda
• Mobile Threat Landscape
• Important Requirements
• Success Criteria
• RFP/RFI Additional Important Items
• Trial Execution
• Reference Questions

5. Title of Presentation DD/MM/YYYY© 2016 Skycure Inc. 5
Old Endpoint vs. New Endpoint
IPS
IDS
FIREWALL
USB
SECURITY
DLP
DATA
ENCRYPTION
WIRELESS SECURITY
APPLICATION CONTROL
AV

6. Title of Presentation DD/MM/YYYY© 2016 Skycure Inc. 6
Mobile Threat Landscape
Physical
Malware
Vulnerabilities
Network

7. Title of Presentation DD/MM/YYYY© 2016 Skycure Inc. 7
Important Requirements
• Aggregate best practices from industry experts
- Deployment process
- End-user experience
- Threat detection & protection
• Network threats
• Malware
• Device vulnerabilities
- Management and Administration
- Integrations
• EMM/MDM
• SIEM
• Exchange
• Other

8. Title of Presentation DD/MM/YYYY© 2016 Skycure Inc. 8
Success Criteria
• May be different for each company
• List and prioritize objectives
• Add relative weighting
• Creates a scorecard for objective
solution comparison
admin

9. Title of Presentation DD/MM/YYYY© 2016 Skycure Inc. 9
RFP/RFI Additional Important Items
• Scalability – size of eventual deployment
• Managed, unmanaged and shared devices
• Support process – vendor + in-house, level 1,2
• Licensing model – subscription for growth and flexibility
• Impact on IT resources
• Impact on end-user productivity, acceptance
• Solution/infrastructure security
• …

10. Title of Presentation DD/MM/YYYY© 2016 Skycure Inc. 10
Planning a Trial
• What are you trying to prove?
- Function
• How complete is the threat detection?
• Review SANS threat vectors – network, malware, vulnerabilities, physical
• Collect/develop sample threats for testing – work with vendor on methods
- End-user acceptance
• Privacy
• Performance impact
- Current organizational risk
• Quantify the current risk exposure
• Use a meaningful sample
• Report

11. Title of Presentation DD/MM/YYYY© 2016 Skycure Inc. 11
During the Trial
Recommend 30 Day Trial
• Step 1 – Deploy solution (Recommend 5-20 devices in varying use cases)
• Step 2 – Request assessment report after a few weeks
Expected Results
NUMBER OF DEVICES WITH MALICIOUS
APPS INSTALLED
PERCENTAGE OF DEVICES EXPOSED TO
NETWORK THREATS
PERCENTAGE OF MOBILE DEVICES RUNNING
OS WITH HIGH-SEVERITY VULNERABILITIES
EVERY ORG
with 200+
devices had iOS
malware
81.57%
7.22%

12. Title of Presentation DD/MM/YYYY© 2016 Skycure Inc. 12
Validate Findings
• Insist on references
- Validate the collected information during the process in addition to elements that can
only be collected from someone who has been down the path.
• Sample questions:
How was your
evaluation process?
Describe your
deployment
What obstacles did
you encounter?
Why did you make
the decision to
move forward?
What value have
you seen so far?How has the
company been to
work with? How are issues
handled?
???

13. Title of Presentation DD/MM/YYYY© 2016 Skycure Inc. 13
Summary
• Be sure solution defends against all mobile threat vectors
• Check off all critical requirements for an MTD solution
• Prioritize and score success criteria for your company
• Execute a thorough Proof of Concept
• Talk to references to validate findings

14. Title of Presentation DD/MM/YYYY© 2016 Skycure Inc. 14
Next Steps
• Download the SANS Institute report here:
- http://get.skycure.com/sans-mobile-threat-protection
• Download the Skycure app from the App Store or Google Play
• Request a 30-day free enterprise trial
- http://get.skycure.com/enterprise-edition-trial
Q&A