Official websites use .gov
A .gov website belongs to an official government organization in the United States.
Secure .gov websites use HTTPS
A lock (
) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.
NIST's National Cybersecurity Center of Excellence (NCCoE) has posted a revised draft of a building block to help enterprises address security issues that result from the use of mobile devices to access company resources. The NCCoE invites the public to comment on the draft. The comment period is open until October 17, 2014.
The NCCoE addresses businesses' most pressing cybersecurity problems with practical, standards-based solutions using commercially available technologies. The NCCoE collaborates with industry, academic and government experts to build modular, open, end-to-end reference designs that are broadly applicable and repeatable.
Building blocks are example cybersecurity implementations that apply to multiple industry sectors and are expected to be incorporated into many of the center's sector-specific use cases. The NCCoE's work to develop building blocks results in practice guides, publicly available descriptions of the practical steps needed to implement a cybersecurity reference design.
In February 2014, the NCCoE posted a draft building block addressing mobile device security and invited comments from the public. The center received and responded to 24 comments and revised the draft accordingly.
The NCCoE now seeks feedback on the revised document. Once that feedback is incorporated into the draft, the center will publish a notice in the Federal Register to invite participation from the technology community.
The draft Mobile Device Security for Enterprises Building Block proposes a system of commercially available technologies that provide enterprise-class protection for mobile platforms that access corporate resources. This building block will examine an array of security technologies that can enable enterprise risk management for users to work inside and outside the corporate network with a securely configured mobile device. This building block will incorporate a layered approach that allows enterprises to tailor solutions to their business needs. The draft Mobile Device Security for Enterprises Building Block document can be viewed online. (link removed; no longer active) Comments should be submitted to mobile-nccoe [at] nist.gov (mobile-nccoe[at]nist[dot]gov) by October 17, 2014.