Mobile Working Group
Introduction to the Mobile Working Group
Over the past several years, enterprise adoption of mobile, and especially BYOD, has redefined enterprise mobility. It has also opened up a series of difficult-to-solve security and compliance concerns. Common among most of these concerns is an eventual realization that taking control over a set of constantly changing devices not owned and paid for by the enterprise is fraught with legal, privacy, and employee relations challenges. For this reason, enterprises have begun to shift focus from managing and protecting mobile devices to protecting mobile data.
The CSA Mobile Working Group will focus on short, regularly updated research that is both concrete and immediately actionable in CSA member organizations.
Scope and Responsibilities
The working group is chartered to research:
- Evolutionary shift from management of mobile devices to management of mobile data
- Security and audit-ability traveling as an integrated part of corporate data, enabling data security anywhere.
- Augmentation of enterprise identity and authentication with omnipresent mobile devices.
- The impact of public cloud applications on mobility and mobile data protection.
- Concerns and challenges related to BYOD programs, policies, stipends, and user privacy.
Mobile Working Group Leadership
Mobile Co-chairs
Rich Campagna
SVP of Products and Marketing, Bitglass
Rich Campagna is SVP of Products and Marketing at Bitglass where he drives product management and marketing. Prior to becoming an integral team member at Bitglass in April 2013, Rich was senior director of product management at F5 Networks, responsible for access security. Rich gained valuable experience in product management and sales engineering at Juniper and Sprint before F5. Rich received an MBA from the UCLA Anderson School of Management and a BS in electrical engineering from Pennsylvania State University.
Nader Henein
Regional Director, Advanced Cyber Assurance
Throughout my career, I have led the design & implementation of complex, secure, business focused systems. I firmly believe in getting my hands dirty and in the importance of working side by side with a motivated team. I am a lifelong advocate of data governance and privacy with two decades of experience in developing and managing a cohesive information lifecycle to support the business.
I have worked in a wide range of organizations kinking off with two startups where I helped shape the strategy and learned to be prepared for everything and anything. In large multinationals with rapidly changing requirements, I believed in developing processes to scale and streamline growth; I am practical, pragmatic and a natural problem solver and I will do my best to bring these traits to our body of work.
Mobile Working Group Initiatives
Open Peer Reviews
| Initiative Details | Date Opened | |
|---|---|---|
Mobile Working Group Security Guidance for Critical Areas of Mobile Computing |
January 12, 2017 | Contribute now |
There are no working drafts at this time.
Thanks for your interest!
Your request to join Mobile has been recorded. Someone will be in touch with you soon with more instructions.
Connect with Us
Mobile Working Group News
January 25, 2017
Reviewers Needed: Security Guidance for Critical Areas of Mobile Computing
Dear Colleagues, The Mobile Working Group is updating the document entitled “Security Guidance for Critical Areas of Mobile Computing” last published in 2012. To streamline the updating process, we are opening a peer review of the 2012 document. We are looking for SMEs to provide feedback on the content or sections that need updating, deleting,…
January 25, 2017
CSA’s Mobile Working Group Seeking New Co-Chair
The Cloud Security Alliance’s Mobile Working Group is seeking new co-chairs to develop and maintain a research portfolio providing capabilities to lead the crystallization of best practices for mobile security, help industry and government on adoption of best practices, establish liaisons with other organizations in order to coordinate the development of mobile security standards, and…
December 02, 2015
Cloud Security Alliance Releases Mobile Application Security Testing Initiative
White Paper Ready for Peer Review SINGAPORE – December 2, 2015 – The Cloud Security Alliance (CSA), the world’s leading organization dedicated to defining and raising awareness of best practices to help ensure a secure cloud computing environment, today announced that its Mobile Application Security Testing Working Group released a new white paper that incorporates elements…
September 16, 2015
How Uber Uses the Cloud to Drive a Mobile Workforce
Oceans of ink have already been spilled extolling Uber’s innovative practices and growing profits, but here’s one aspect getting less attention: How the company’s nearly 100 percent cloud-based business empowers its vast network of mobile workers (the drivers)… Read blog post
June 29, 2015
Cloud Security Open API: The Future of Cloud Security
The Cloud Security Alliance launched the Cloud Security Open API Working Group with the goal to provide guidance for enterprises and cloud service providers on the operation and interoperability of cloud security functions, with a specific goal to protect PII and sensitive data across multiple clouds. Read blog post
May 28, 2015
Who’s backing up BYOD data? One more reason for cloud disaster recovery
If you’re among the 60% of organizations that don’t have a disaster recovery plan, or among the 59% that only back up data in one location, here are 5 good reasons to shore up your plan and include the cloud as one of your endpoint backup solutions… Read blog post
March 26, 2015
How To Address The BYOD Security Issue
This proliferation of data that is now moving outside of company networks, down to things like employee-owned smartphones, tablets and laptops can increase the chance of data leaking out and getting into the wrong hands. This is perhaps why BYOD has become a huge pain point for professionals looking to secure mobile devices. Read blog…
November 07, 2013
Cloud Security Alliance Annual Congress to Serve as Launchpad for New Research, Guidance Reports and Working Groups
CSA today released its planned research agenda and a preview of new working groups to be launched at the upcoming CSA Congress 2013, taking place December 4-5 in Orlando.
September 24, 2013
Cloud Security Alliance Mobile Working Group Opens Annual Mobile Market Maturity Survey
Group seeks global input to understand current market maturity and needed processes to manage enterprise mobile technology.
February 12, 2013
CSA Announces Working Group Sessions at RSA in San Francisco
CSA is hosting sessions during the week for some of our active working groups. These are free events that will be held outside of the regular conference on Thursday, February 28th.
November 08, 2012
Cloud Security Alliance Releases Security Guidance for Critical Areas of Mobile Computing
CSA Mobile Working Group report aims to provide industry with mobile security best practices.
October 25, 2012
CSA Seeks Input on a Mobile App Store Security Initiative Policy Guideline Document
The CSA Mobile Working Group would like to invite you to review and comment on their Mobile App Store Security Initiative Policy Guideline document that was created by their Initiative 5 sub-group.
October 19, 2012
CSA Seeks Input on a Mobile Authentication Document
Review and comment on the Mobile Authentication Document that was created by their Initiative 4 Authentication Sub-group.
October 19, 2012
CSA Seeks Input on a Mobile BYOD Document
Review and comment on the Bring Your Own Device (BYOD) Document that was created by their Initiative 3 BYOD Sub-group.
October 16, 2012
Take The CSA Mobile Maturity Questionnaire
This brief 5-10 minute survey is designed to help the Cloud Security Alliance, as well as, enterprises and individual consumers understand the current maturity level of the mobile marketplace.
October 04, 2012
Data Loss from Missing Mobile Devices Ranks as Top Mobile Device Threat by Enterprises
CSA Mobile Working Group today released findings from a new survey that calls out the specific security concerns enterprise executives say are the real and looming threats as it relates to mobile device security in the enterprise environment.
September 20, 2012
CSA Identifies 17 Key Components for Effective Mobile Device Management of BYOD and Company-Owned Devices
The whitepaper is one of six parts to the upcoming, “Security Guidance for Critical Areas of Mobile Computing” report, one of a number of important research items to be presented and discussed at the upcoming annual CSA Congress being held November 7-8 in Orlando.
July 18, 2012
CSA Research Sponsorship Opportunities Available
CSA announces the availability of several new opportunities to sponsor key research initiatives. Your support helps us maintain our aggressive research schedule and accelerate responsible adoption of cloud computing.
July 11, 2012
Take the CSA Top Threats to Mobile Computing Survey
Due to the rapid adoption of mobile computing, and immediate connection to cloud computing, the CSA is creating a “Top Threats to Mobile Computing” report.
July 07, 2012
CSA Seeks Input on “Mobile Device Management: Key Components” whitepaper
The peer review site and survey will be open until Friday, July 20th, 2012.
March 20, 2012
Mobile Working Group Kick-Off (Call 2)
To accommodate all time zones, CSA will now be launching a Mobile Working Group kick-off (call 2) after our call 1 was held on March 15th.
February 27, 2012
CSA Launches Mobile and Innovation Initiatives at RSA
Cloud Security Alliance (CSA) today announced two significant new initiatives for 2012, addressing growing areas of need in cloud security – mobile computing and innovation.
Mobile Working Group Downloads
Mobile Application Security Testing
The Mobile Application Security Testing (MAST) Initiative is a research which aims to help organizations and individuals reduce the possible risk exposures and security threat in using mobile applications. MAST aims define a framework for secure mobile application development, achieving privacy and security by design. Implementation of MAST will result in clearly articulated recommendations and…
Release Date: June 30, 2016
Mobile Application Security Testing Initiative Revised Charter
Mobile applications are becoming an integral part of not just modern enterprises but also of human existence and a huge part of this shift is due to the emergence of cloud computing. The Mobile Application Security Testing initiative will aim to create a safer cloud ecosystem for mobile applications by creating systematic approaches to application…
Release Date: March 14, 2016
Mobile Application Security Testing Initiative Charter
Mobile applications are becoming an integral part of not just modern enterprises but also of human existence and a huge part of this shift is due to the emergence of cloud computing. The Mobile Application Security Testing initiative will aim to create a safer cloud ecosystem for mobile applications by creating systematic approaches to application…
Release Date: February 16, 2015
Security Guidance for Critical Areas of Mobile Computing
Mobile devices empower employees to do what they need to do — whenever and wherever. People can work and collaborate “in the field” with customers, partners, patients or students and each other. But they need to be supported with always current operational processes and information, whether from apps, the Internet, or documents from other people.
Release Date: November 08, 2012
Mobile Top Threats
Release Date: October 04, 2012
Mobile Device Management: Key Components
Release Date: September 20, 2012
Mobile Working Group Videos
Difficult to Track Your ROI in a Bring Your Own Device (BYOD) Environment
Release Date: June 18, 2013
Bring Your Own Device Shows Increase in Worker Productivity
Release Date: June 18, 2013
Explaining the Hidden Costs in a Bring Your Own Device (BYOD) Environment
Release Date: June 18, 2013
Latest Initiatives
- Cloud Security for Startups – June 2017 - June 16, 2017
- Enterprise Architecture Working Group Charter - May 15, 2017
- Blockchain/Distributed Ledger Working Group Glossary+ - May 10, 2017
Upcoming Meetings
Quantum-safe Security Working Group
Platform:
Webex
Meeting ID:
193 688 094
Mobile Working Group
Platform:
Webex
Meeting ID:
192 985 000
Internet of Things Working Group
Platform:
Webex
Meeting ID:
192 364 319
CloudCISC Working Group
Platform:
Webex
Meeting ID:
226 678 722
Software Defined Perimeter Working Group
Platform:
Webex
Meeting ID:
194 435 865
Dial-in by Phone to Webex
Dial one of these phone numbers then enter the Meeting ID when prompted.
- US: +1-415-655-0001
- Austria: +43-125-302-1547
- Belgium: +32-2894-8319
- Denmark: +45-3272-7726
- France: +33-17091-8651
- Germany: +49-6925511-4406
- Italy: +39-023041-0445
- Luxembourg: +352-2088-1746
- Netherlands: +31-20794-6701
- Spain: +34-91769-9724
- Switzerland: +41-43456-9569
- UK: 44-203-478-5291
Can’t access your meeting?
Get help with Webex
Quantum-safe Security Working Group
Platform: WebexMeeting ID: 193 688 094
Mobile Working Group
Platform: WebexMeeting ID: 192 985 000
Internet of Things Working Group
Platform: WebexMeeting ID: 192 364 319
CloudCISC Working Group
Platform: WebexMeeting ID: 226 678 722
Software Defined Perimeter Working Group
Platform: WebexMeeting ID: 194 435 865
Dial-in by Phone to Webex
Dial one of these phone numbers then enter the Meeting ID when prompted.
- US: +1-415-655-0001
- Austria: +43-125-302-1547
- Belgium: +32-2894-8319
- Denmark: +45-3272-7726
- France: +33-17091-8651
- Germany: +49-6925511-4406
- Italy: +39-023041-0445
- Luxembourg: +352-2088-1746
- Netherlands: +31-20794-6701
- Spain: +34-91769-9724
- Switzerland: +41-43456-9569
- UK: 44-203-478-5291
Can’t access your meeting?
Get help with Webex
Security Trust and Assurance Registry
STAR is a free, publicly accessible registry that documents the security controls provided by various cloud computing offerings.
Welcome New Members
The CSA is a member-driven organization, chartered with promoting the use of best practices for providing security assurance within Cloud Computing. We would like to welcome our newest members:
- InConcert
- NTT Security
- PrecisionLender
- Engility
- LVSC Sands
