From: Midsize Insider

Added by Doug Bonderud

Mobile devices aren’t strangers to business any longer. The “bring your own device” (BYOD) “trend” is now more accurately described as ubiquitous – companies can’t afford to keep mobile devices out of the boardroom. As a result, midsize admins have to deal with a wide range of possible security problems. Recently the British government issued a set of guidelines for iOS 6, detailing how best to use the operating system when handling restricted data, but does any mobile OS really have the upper hand when it comes to IT security?

Risk and Management

That’s what CESG, the British government’s IT security arm, wants to educate users and IT admins about when it comes to using iPhones and iPads in the public sector, according to an article at ZDNet. They’ve published a set of risk management guidelines that include ways to protect sensitive emails, including Impact Level 3 (IL3), also known as “restricted.” There are six defined information levels, with unrestricted at position zero and top secret taking sixth spot.

While at first glance it may seem iOS is getting the thumbs up from British security experts, that’s not entirely accurate. CESG has merely published guidelines for managing risk. A spokeswoman for the security agency says, “CESG is currently working on updates and enhancements to a number of our mobile security guidance documents.” In other words, Apple isn’t the only one – CESG previously issued guidelines for Windows Phone and BlackBerry, and updates are sure to come with the Windows Phone 8 (WP8) release.

Not Alone in the Market

Tech pundits agree that while Apple and Android are the “big two” in mobile security, Microsoft still has a chance to secure top spot if their Windows Phone 8 delivers solid security performance. Already, Android is starting to look more like Apple with the development of their optional app scanner, which lets users scan and compare third-party apps to a list of green-lit applications.

A recent InformationWeek article discusses WP8’s security. Most of its features are the same as Androids and iDevices right out of the box, including Exchange ActiveSync and a certification-driven application environment. In addition, Microsoft’s offering comes with BitLocker technology for secure encryption. While CEO Amit Pandey of Zenprise says the Windows Phone offers a “more seamless approach,” he doesn’t see “any additional control advantages.”

For midsize business IT, the largest advantage to a Windows Phone is its ability to integrate with existing technology. It’s nothing special in the security department, but it’s also not missing any key pieces – Microsoft has had enough time watching Apple and Android to know what works and what doesn’t.

That the British government takes time to review and recommended mobile device use procedures is a clear indication of their rising influence in the public sector. While iOS 6 offers enough security features to handle midrange restricted data, it’s not impenetrable, any more than Android or Windows Phone 8 defenses. Midsize IT are well served by referencing public-use documents, especially from large government agencies, but simply because a federal agency permits a mobile device, an endorsement doens’t naturally follow.