BANGALORE: On the other side of the coin are the IT professionals who are challenged with the difficult task of keeping the virtual office secure and stable. From their perspective, every mobile device is a potential network security leak to be plugged and a potential data theft liability, especially since users are known to keep highly sensitive information like e-mails, SMS, contacts GPS tracks etc. on their devices.

A survey by InsightExpress found that the majority of smart phone users (55.7 percent) store confidential personal, business or client data on their devices (Source: Enterprise Networks and Servers) - thereby increasing the risk of this information falling into the wrong hands when the device is stolen.

Building a more secure deployment of mobile devices is crucial, but must also be balanced with providing a seamless and intuitive user experience which is a challenge that enterprises and IT vendors have to together address.

Here, it is important to understand that both the software used in any mobile computing device as well as the backend infrastructure play critical roles in addressing the security concerns and protecting confidential information. It is imperative that IT vendors posses a long-term security vision and a well chalked out security technology roadmap.

Microsoft has made security a key focus area under its trustworthy computing initiative, with a vision to provide the most secure products. Windows Mobile 6 – its latest mobile operating software, has both in built security features at the device level as well as those that offer users additional control over data.

The former includes features such as PIN authentication, password protection and storage card encryption (which can encrypt all data on the handheld i.e change it into a format that cannot be read without the encryption key) to prevent unauthorized access. The latter includes features that enable users to immediately erase data from a remote location, if the device is misplaced/ or stolen.

Enterprises on their part have to ensure that they have the right infrastructure in place and that their employees are well aware of the security measures they should adopt to guarantee security of data.

Let us first look at the mobile communication architecture that plays a key role in enterprise mobility. There are primarily three layers to consider when planning or upgrading a mobile deployment: the device, the message server and the network.

Device level security

At the device level, key challenges include allowing only authorized access to the device and preventing unauthorized applications such as viruses or spyware from being installed or accessing critical parts of the device. Besides password protection PIN authentication, password protection and storage card encryption, management role definition, application access tiers, code signing settings, security settings, and security certificates combine to help achieve device-level protection.