NIST Seeks Comment on Mobile Device Cybersecurity Guide

The National Institute of Standards and Technology's National Cybersecurity Center of Excellence (NCCOE) sought comment Wednesday on its draft cybersecurity practice guide for mobile device security. The draft guide notes how existing technologies can help companies improve security of sensitive data stored on employee-used mobile devices. The guide includes a “typical” IT scenario that “shows organizations how to configure a device so that it can be trusted, as well as how to remove the device from systems" if it's stolen or lost, or when an employee leaves a company, NIST said. The guide also includes instructions for installing and integrating security solutions into existing IT infrastructure. “Mobile devices extend or eliminate the notion of traditional organization boundaries, posing challenges that nearly all businesses regardless of sector or organization size” face, said NCCOE Deputy Director Nate Lesser in a news release. Comments on the draft guide are due Jan. 8, NIST said.