Tip Doctor, Insider Learning Network.
This tip was excerpted from “Plan for Risks and Recovery in Sybase Mobile Sales for SAP CRM” by Judith M. Myerson. The original article was added to the CRM Expert knowledgebase in November 2010.
Working outside the office (and the LAN), which is guarded by firewalls and intrusion measures, can increase risks to the Sybase Mobile Sales for SAP CRM application. This risk is present whether the user has an iPhone or Windows Mobile phone or plans to use the upcoming BlackBerry version of Sybase Mobile Sales for SAP CRM.Security Controls.
Here are some examples of security controls for the functions of the Sybase Mobile Sales for SAP CRM application. Note that many of the examples relate to the iPhone version but are applicable to other versions of Sybase Mobile Sales for SAP CRM as well.
Monitor Wi-Fi Connections
You or your users should enable the iPhone’s Ask to Join Network function. To enable it, tap the main iPhone Settings tab and then choose Wi-Fi. In the next screen, turn on Ask to Join Network by tapping the on/off button next to the option. This way you will never connect to an open Wi-Fi network without first being asked to confirm the connection. Alternatively, you can disable Wi-Fi when you do not want to use it. This reduces the chance of accidentally connecting to an unsecured or suspect network. If you use Wi-Fi, get a properly configured VPN to wor
k over the Wi-Fi. Make sure Wi-Fi networks are secure using Wi-Fi Protected Access (WPA) or another wireless security protocol.
Enable Passcode Lock
To turn on Passcode Lock, click the main iPhone Settings icon. Tap General and then Passcode Lock. Enable the function by tapping Turn Passcode On. You will be prompted to enter a new password. Make sure you choose a password that hackers can not easily guess. You should set the passcode prompt for immediate use by selecting Require Passcode and then setting the passcode prompt to Immediately. You should also disable Show SMS Preview. It’s not a good idea to enable it because the SMS preview function shows the first sentence of new text messages to appear on screen even when you have not entered a passcode.
Roles and Directories
The organization allows a user of SAP Mobile Sales for SAP CRM access to resources on the corporate network based on the individual, their role, and organizational policy. Here are sample access questions for common related roles:
- Is the user a salesperson using the mobile application to access planned activities?
- Or is it an SAP CRM functional specialist?
- Or is it the CIO checking the logs of emails and phone calls to find out if the use of SAP Mobile Sales for SAP CRM is getting the organization more sales?
Protect Sensitive Data
Your organization must be able to monitor and update the Sybase Mobile Sales for SAP CRM application at any location with tools that provide secure access to the company network via a VPN client, as well as authenticated data and encryption. A policy on upgrading and patching the application must be enforced. Non-compliant mobile devices running Sybase Mobile Sales for SAP CRM should be disabled.
Some US states, including Massachusetts and Nevada, will soon require encryption on all mobile devices if they contain personal information. Companies must be able to retrieve data from mobile devices if the information is part of ongoing litigation.
Monitoring at all times to ensure compliance of all Sybase Mobile Sales for SAP CRM should be in place. This includes flagging those that do not comply. Strong encryption for sensitive data must be ensured and locked down to prevent hackers or other threats from accessing them. Here are some examples of security controls as they pertain to technical issues with Sybase Mobile Sales for SAP CRM that I described earlier:
- Application restart: Restart the device and then log in to open the Sybase Mobile Sales for SAP CRM application.
- Application reinstall: Uninstall the application, reinstall it, and log in. Make sure the application version is the latest version. Check the connection information for whether the subscription to Sybase Mobile Sales for SAP CRM has been has been confirmed.
- Application offline: When you do not need to connect the mobile application to the SAP server, you can take the application offline. For example, you may want to review a document on sales opportunities after you download it. To do so, turn Airplane Mode ON in the iPhone’s Settings. This will conserve your battery power.
- Connection information: Uninstall Sybase Mobile Sales for SAP CRM from the device and then enter the proper connection information. From the iPhone home page, tap Settings > Sybase and enter the connection information. Start the application and then log in to subscribe to the SAP system.
- Contact update: Log in to Sybase Mobile Sales for SAP CRM and then select Contacts to edit or delete phone, mobile, or fax numbers
- Report view and edit: To view the Top Opportunities report containing the long name of a prospect, zoom out until you can see the entire report. To edit the report, return to portrait mode.
Read more about security best practices with Mobile Sales for SAP CRM in Judith’s full article on CRM Expert. And find more articles, blogs, interviews and additional resources in the CRM Group on Insider Learning Network.