Appendices

Mobile Security Index
2020 Report




  • Want to learn more about this report, mobile security or the broader cyberthreat landscape? In this section, you'll find information on our survey methodology, details about the data referenced in this report, bios of our contributors and recommended further reading—from law enforcement advisories to spotlights on specific industries and segments.

  • Further reading

    Ìý

    ɧ»¢ÊÓÆµ thought leadership

    ɧ»¢ÊÓÆµ is committed to sharing analysis and insights with the rest of the industry, law enforcement, and public- and private-sector organizations in the interests of improving the securityÌýof devices, data and critical infrastructure. As part of this commitment, we publish a number of pieces of research and thought leadership.


    Other ɧ»¢ÊÓÆµ Mobile Security Index publications

    Industry spotlights

    These concise reports provide detailed insights into the state of mobile security in four key vertical sectors: finance, healthcare, manufacturing and retail.

    Learn more

  • Small and medium-sized business spotlight

    This report gives a deep dive into the threats companies with up to 499 employees are facing.

    Learn more

    Ìý

  • Public sector spotlight

    Learn about the state of mobile security in the public sector—including local, state and federal government and educational institutions.

    Learn more




  • Other ɧ»¢ÊÓÆµ security reports

    Data Breach Investigations Report

    The DBIR is one of the IT industry’s foremost security publications. Since 2008, it has provided highly respected insight into the state of cybersecurity based on analysis of real incidents. Overall, the DBIR team has analyzed over 375,000 security incidents, including nearly 18,000 confirmed data breaches, from around the world. The 13th edition will be published in early 2020.

    Learn more
    Ìý

  • Insider Threat Report

    The Insider Threat Report provides detailed insights on five main causes of internal data breaches, so you can strengthen your cybersecurity protections and reduce the risk of valuable assets being compromised from within your business.

    Learn more
    Ìý

  • Payment Security Report

    ɧ»¢ÊÓÆµâ€™s annual Payment Security Report on payment card security has become vital reading for those responsible for security payment systems. Driven by its analysis of compliance with the Payment Card Industry Data Security Standard (PCI DSS), it offers valuable insight into building proactive, robust security controls and achieving genuine data protection, not just passing the test.

    Learn more

  • Data Breach Digest: Telephonic pretexting, identity theft and Wi-FiÌý compromise

    Insights into common cyberattack scenarios, based on real incidents investigated by the ɧ»¢ÊÓÆµ investigative response team.


  •  

    Additional resources from government and law enforcement agencies
     

    FBI advisory on business email compromise

    Read the FBI’s statistics on the rise of reported incidents of BEC/EAC fraud around the world, and total reported losses. And learn how to protect your own organization.


  • FBI advisory on ransomware

    Find out how cybercriminals use a variety of techniques to infect their victims' systems with ransomware, how you can protect your organization and what you should do if you’ve been affected.



  • Mobile security updates from NIST’s center of excellence

    The National Cybersecurity Center of Excellence (NCCoE) mobile device security efforts are dedicated to solving businesses' most pressing mobile cybersecurity challenges.



  • NIST guidance on corporate-owned personally enabled (COPE) devices

    Helpful guidance on managing COPE mobile devices and reducing the risk these devices can pose to cybersecurity.


     

  • U.K. Home Office buyers' guide to mobile security

    Simple guidance on securing your mobile device from the Home Office of  Her Majesty's Government of the United Kingdom, responsible for immigration, security, and law and order. Suitable for sharing with device users.


  • Methodology


    We contracted an independent research company toÌýsurvey senior professionals responsible for the procurement,Ìýmanagement and security of mobile devices. RespondentsÌýwere invited to complete one of two surveys, one on mobileÌýdevices (including tablets, laptops enabled with cellularÌýor Wi-Fi connectivity, and mobile phones) and one on IoTÌýdevices (such as connected wearables, smart buildingÌýsystems and fleet management systems).

    In total, 876 professionals responsible for the buying,Ìýmanaging and security of these devices responded.ÌýThe following charts break down the demographics ofÌýthese respondents.

    Our sample included both small companies and largeÌýenterprises. Company size was not a strong indicatorÌýfor most of our questions. Unless stated otherwise,Ìýall data in this report is from these surveys.

  • Figure 28, 29, 30 and 31

  • Ìý

    Contributors
    Ìý

  • Security Companies
    Ìý

  • Asavie

    Asavie simplifies digital transformation for enterprises and OEMs, including the most advanced IoT and enterprise SD-WAN deployments. Its self-serve, programmable SaaS solutions enable secure mobile access in a multicloud, multinetwork world. It unifies visibility and control across all an organization’s mobile and IoT endpoints, legacy andÌýgreenfield implementations, providing intelligent insights to help reduce costs and improve overall performance. It is an ISO27001 certified company.

    Information supplied by Asavie for this report is based on anonymized data gathered from its base of more than 10,000 enterprise customers over the first 9 months of 2019.

  • Lookout

    Lookout is a cybersecurity company for the post-perimeter cloud-first, mobile-first world. It is trusted by hundreds of millions of individual users, enterprises and government agencies, and partners such as ɧ»¢ÊÓÆµ, Microsoft and Apple. Powered by the largest dataset of mobile code in existence, the Lookout Security Cloud provides visibilityÌý into the entire spectrum of mobile risk. The installed base ofÌýLookout's personal and enterprise mobile endpoint products is over 170 million mobile devices worldwide. This acts asÌýa global sensor network that provides visibility into the threat landscape, including over 70 million apps—and that’s growing by up to 90,000 apps a day.

    Lookout leveraged its mobile data set to provide data used in this report. It also helped analyze the results and provided insight on the current threat landscape.

  • IBM

    IBM Security MaaS360 is a UEM solution that uses AI and analytics to transform the way organizations support users, apps, content and data across every type of device. Its open, cloud-based platform integrates with preferred security and productivity tools, allowing modern businesses to derive value quickly.

    The MaaS360 Mobile Metrics feature offers cloud- sourced benchmarking data and best practices to enhance productivity and improve security. Benchmarking data is generated by leveraging multiple data values from MaaS360 client implementations to build aggregated metrics.

  • MobileIron

    MobileIron’s mobile-centric, zero-trust approach is built on aÌýUEM foundation to secure access across the perimeter-lessÌýenterprise. Its approach to security helps to reduce risk byÌýgiving organizations complete control over their businessÌýdata as it flows across devices, apps, networks and cloudÌýservices. MobileIron UEM puts enterprise mobile security atÌýthe center of your enterprise and allows you to build uponÌýit with enabling technologies such as zero sign-on user andÌýdevice authentication,Ìý multifactor authentication and mobileÌýthreat detection.

    Unless otherwise specified, MobileIron data points givenÌýin this report are based on aggregated usage data fromÌýdevices with threat detection activated across the installedÌýbase of MobileIron Threat Defense and Zimperium, gatheredÌýover the course of 2019.

  • NetMotion

    NetMotion offers an intelligent software solution for today’sÌýmodern, mobile organizations. This enhances connectivityÌýand security for users while providing complete visibility andÌýcontrol for IT teams with real-time data and analytics. It hasÌýreceived numerous awards for its technology and customerÌýsupport, including consistently high Net Promoter Scores.ÌýWorldwide, nearly 4,000 enterprise organizations andÌý1 million users depend on it.Ìý

    The NetMotion data used in this report is from consentingÌýthird parties and customers running its software or fromÌýits Employee Frustration Index, a survey of 285 individualsÌýacross a wide range of age groups and device types. AllÌýusers and respondents were from within North America.Ìý

  • Netskope

    The Netskope Security Cloud, used by millions of users inÌýthousands of accounts globally, provides visibility and nearÌýreal-time data and threat protection when accessing cloudÌýservices, websites and private apps from anywhere, onÌýany device. Netskope understands the cloud and deliversÌýdata-centric security from one of the world’s largestÌýand fastest security networks, empowering some of theÌýlargest organizations in the world with the right balance ofÌýprotection and speed they need to enable business velocityÌýand secure their digital transformation journey.

    Netskope provided aggregated, anonymized data from theÌýNetskope Security Cloud platform for this report.Ìý

  • Symantec, a Division of Broadcom

    Mobile threat intelligence provided by Symantec EndpointÌýProtection Mobile (SEPM) is used to predict, detect andÌýprotect against a broad range of existing and unknownÌýthreats. SEPM’s predictive technology uses a layeredÌýapproach that leverages massive crowdsourced threatÌýintelligence, in addition to both device-based and server-basedÌýanalysis, to proactively protect mobile devices from malware,Ìýnetwork threats, and app and OS vulnerability exploits.

  • VMware

    VMware software powers complex digital infrastructureÌýaround the world. Its cloud, networking and security, andÌýdigital workspace offerings provide a dynamic and efficientÌýdigital foundation to customers globally, aided by anÌýextensive ecosystem of partners. Headquartered in PaloÌýAlto, California, VMware is committed to being a force forÌýgood, from its breakthrough innovations to its global impact.

    VMware routinely carries out Customer Advocacy studies,Ìýdata from which was used in this paper.

  • Wandera

    Wandera is a cloud security company that protects modernÌýenterprises beyond the traditional perimeter. When remoteÌýusers access applications from their smartphones orÌýlaptops, anywhere in the world, its unified security cloudÌýprovides real-time threat protection, content filtering andÌýzero-trust network access. Wandera regularly shares theÌýlatest findings from its threat intelligence, which appliesÌýmachine learning across 425 M worldwide sensors.ÌýFounded in 2012 by a team of cloud security veterans,Ìýit is headquartered in San Francisco and London, and isÌýrecognized as a leader by leading analyst firms.Ìý

    Wandera researchers teamed with ɧ»¢ÊÓÆµ to investigateÌýmobile security trends that covered one full year of realworldÌýusage in customer environments. The devicesÌýincluded both bring-your-own (BYO) and corporate-liableÌýplatforms that were protected by a Wandera mobileÌýsecurity solution.



  • Law enforcement
    Ìý

  • Federal Bureau of Investigation (FBI)

    The mission of the FBI’s Internet Crime Complaint CenterÌý(IC3) is to provide the public with a reliable and convenientÌýreporting mechanism to submit information concerningÌýsuspected internet-facilitated criminal activity, and toÌýdevelop effective alliances with industry partners. Over theÌýlast five years, the IC3 has received an average of almostÌý300,000 complaints per year. These address a wide arrayÌýof internet scams and cybercrime affecting victims acrossÌýthe globe.

  • United States Secret Service

    The U.S. Secret Service has two core responsibilities:Ìýensuring the safety of the U.S. President and Vice President,Ìýtheir families, and other designated individuals, eventsÌýand locations; and safeguarding the nation’s financial andÌýpayment systems. While the Secret Service is undeniablyÌýtoday better known for the first of these two responsibilities–physical protection–its history, traditions and expertise areÌýall firmly rooted in its more than 150 years of conductingÌýfinancial crime investigations.

    As the global financial system has become increasinglyÌýintegrated and digitized, the Secret Service has steadilyÌýturned its investigative focus to cyberspace, where theÌýmost significant financial crimes threatening the integrity ofÌýthe U.S. economy are now committed. Consequently, overÌýthe course of the past 30+ years, the Secret Service hasÌýbuilt a reputation for countering the most sophisticated andÌýprofitable cybercrimes, and for apprehending some of theÌýworld’s most notorious transnational cybercriminals.Ìý

Services and/or features are not available in all countries/locations, and may be procured from in-country providers in select countries. We continue to expand our service availability around the world. Please consult your ɧ»¢ÊÓÆµ representative for service availability. .