This is an automated archive.

The original was posted on /r/cybersecurity by /u/Domane57 on 2023-08-15 14:47:45+00:00.

I asked a slightly different question in the CMMC subreddit a couple of weeks back, but I’m trying to gather information about how some of you approach mobile application management in the corporate environment. In my case, all devices are MDM managed and our corporate data is segmented using MAM & DLP. Beyond that though, to make the phones more usable to employees, do any of you have a process, or use some mobile app review site or something, in selecting which apps are available on corporate devices? The interest here is that if we are overly restrictive, then people just won’t be available on the corporate phone after hours, but occasionally need to take a call or check a text message. Assuming we’ve met compliance requirements and data isn’t at risk - what other criteria do you use? Thanks!