Guidelines for Managing the Security of Mobile Devices in the Enterprise

Published

May 17, 2023

Author(s)

Murugiah Souppaya, Gema Howell, Karen Scarfone, Joshua Franklin, Vincent Sritapan

Abstract

Mobile devices were initially personal consumer communication devices, but they are now permanent fixtures in enterprises and are used to access modern networks and systems to process sensitive data. This publication assists organizations in managing and securing these devices by describing available technologies and strategies. Security concerns inherent to the usage of mobile devices are explored alongside mitigations and countermeasures. Recommendations are provided for the deployment, use, and disposal of devices throughout the mobile-device life cycle. The scope of this publication includes mobile devices, centralized device management, and endpoint protection technologies, as well as both organization-provided and personally owned deployment scenarios.

Citation

Special Publication (NIST SP) - 800-124r2

Report Number

800-124r2

NIST Pub Series

Special Publication (NIST SP)

Pub Type

NIST Pubs

Download Paper

https://doi.org/10.6028/NIST.SP.800-124r2

Local Download

Keywords

enterprise mobility management (EMM), mobile, mobile application vetting (MAV), mobile device management (MDM), mobile security, mobile threat defense (MTD), tablets.

Citation

Souppaya, M. , Howell, G. , Scarfone, K. , Franklin, J. and Sritapan, V. (2023), Guidelines for Managing the Security of Mobile Devices in the Enterprise, Special Publication (NIST SP), National Institute of Standards and Technology, Gaithersburg, MD, [online], https://doi.org/10.6028/NIST.SP.800-124r2, https://tsapps.nist.gov/publication/get_pdf.cfm?pub_id=936718 (Accessed October 13, 2025)