responding to mobile device vulnerabilities using radar ... · responding to mobile device...

3
Responding to Mobile Device Vulnerabilities using Radar Reporting Mobile Device Reports CASE STUDY Company information: 59,000 employees Business Need Back in 2014 a vulnerability in iOS 7.0.6 was discovered that affected iPhones, iPads and other Apple Mobile devices. This vulnerability was called the GOTO FAIL bug and affected all Apple devices running this or prior operating system versions. The bug allowed an attacker to intercept encrypted communications using SSL certificates. This customer had to determine which Mobile Devices their employees were using and whether those devices were affected by this vulnerability.

Upload: others

Post on 04-Jun-2020

5 views

Category:

Documents


0 download

TRANSCRIPT

Page 1: Responding to Mobile Device Vulnerabilities using Radar ... · Responding to Mobile Device Vulnerabilities using Radar Reporting Mobile Device Reports CASE STUDY Company information:

Responding to Mobile Device Vulnerabilities usingRadar Reporting Mobile Device Reports

CASE STUDY

Company information: 59,000 employees

Business Need

Back in 2014 a vulnerability in iOS 7.0.6 was discovered that affected iPhones, iPads and other Apple Mobile devices.

This vulnerability was called the GOTO FAIL bug and affected all Apple devices running this or prior operating system versions. The bug allowed an attacker to intercept encrypted communications using SSL certificates.

This customer had to determine which Mobile Devices their employees were using and whether those devices were affected by this vulnerability.

Page 2: Responding to Mobile Device Vulnerabilities using Radar ... · Responding to Mobile Device Vulnerabilities using Radar Reporting Mobile Device Reports CASE STUDY Company information:

Solution

The customer turned to Radar for Office 365, specifically the Mobile Devices by OS reports to identify which of their employees were affected by this vulnerability.

They created a set of customised filters for the Mobile Devices by OS report that reported all Apple Mobile Devices that did not have the latest version of iOS installed. This report was scheduled to be emailed out to the Help Desk team every morning.

Benefits

As the customer was an existing Radar for Office 365 customer they were able to respond to this vulnerability in minutes by simply adding filters to Radar Reporting pre-existing Mobile OS reports.

Every day the Help Desk team received a list containing the Names, Email Addresses, Phone Numbers and Mobile Device type for everyone in the company that had a vulnerable Apple device. The report enabled them to respond pro-actively, contacting every employee on the list and guiding them through the process to upgrade their operating system. Their quick responses reduced the risk to any corporate data could might have been compromised by an attacker through this vulnerability.

In a little over 3 weeks, the number of vulnerable devices dropped from over 20,000 to under 500. Each day the automated report contained fewer and fewer names. This was also used to track and report progress on this issue to the CIO in daily IT meetings. This customer explained to Quadrotech how they were using our reports to respond to this vulnerability and we were so impressed that we created a Saved Report within the application for all our customers, so that they too could use this process within their own organisations.

Page 3: Responding to Mobile Device Vulnerabilities using Radar ... · Responding to Mobile Device Vulnerabilities using Radar Reporting Mobile Device Reports CASE STUDY Company information:

Licence Reports

Security & Compliance Reports

Get full visibility of your Office 365 licence types with full breakdown of licence by user and licence by service.

View who has administrative rights to your Office 365 Environment to identify if there are users who have the wrong access.

Mobile Devices Reports

Skype for Business Reports

Identify inactive mobile devices connecting to our Office 365 environment that may need to be removed.

Understand how your users are engaging using Skype for Business with detailed reporting on sessions by type, conference details, login and activity reports.

Mail Traffic Reports Service Status Reports

Monitor mail traffic usage by identifying top senders and receivers and the size of messages being sent and received in your environment.

Use the Service Status report to identify service incidents or maintenance which may affect your tenant.

Reports available with a Radar for Office 365 subscription

Understand exactly how your employees are using Office 365 with our simple yet powerful reporting application.