Container technology – future-proof solution for IT security for smartphones and tablets

Smartphones and tablets are increasingly in the crosshairs of hackers. Hardly surprising, given that they support business-critical processes and are connected to organizations’ back-end systems. Yet according to Germany’s Federal Office for Information Security (BSI), half of the companies surveyed invest less than 10 percent of their IT budget in cybersecurity – while at least 20 percent is recommended.

Read on to learn how to effectively protect communication and data on smartphones and tablets with modern container technology.

Key Points at a Glance

• Mobile devices are an often-underestimated entry point for cyberattacks.
• IT security is a top priority for executives: Only 10 percent of executive teams view mobile apps as a major risk.
• Mobile Device Management (MDM) manages devices but does not separate personal and work-related data, as required by the GDPR.
• Container technology encrypts and isolates all work-related data—both on the device and during transmission.
• Good container solutions are BSI-certified, easy to use, do not require a VPN, and support smart cards.

Remote Work – from exception to the new normal

Employees need to—and want to—be productive while working from home and on the go. According to Bitkom, approximately 10.5 million employees were working from home in December 2020, with 45 percent doing so at least part of the time. But simply sending employees home and hoping for the best in terms of security is a risky move: Nine out of ten companies in Germany were affected by data theft, espionage, or sabotage in 2020–2021. The annual cost of these incidents totaled 220 billion euros.

This poses a major challenge for IT departments—regardless of whether the organization provides company-owned devices (COPE) or employees use their personal devices (BYOD). Three factors are crucial:

1. Mobile devices are easy to lose. Unauthorized persons must not be granted access to company or government data, and the data must be quickly restored on a replacement device.
2. Mobile devices contain personal content. IT administrators must not be able to access private photos or contacts—otherwise, the requirements set by regulatory authorities will not be met.
3. The line between personal and business use must be clear. Employees must be made aware of the risks so that they do not install apps containing hidden malware.

Security issues are key concerns for decision-makers

Why, then, are cyber threats still being neglected? The “Mobile Security” study by Computerwoche shows that risk awareness among decision-makers is alarmingly low. Fifty-three percent of the 600 IT and business decision-makers surveyed view data theft as the greatest risk—but only 10 percent of executive teams consider mobile apps to be a major risk. Only those who have a clear understanding of IT risks and a protection strategy themselves can set the standard for employees and lead by example.

Mobile IT Security: Why MDM Is Reaching Its Limits

Organizations traditionally address IT security for smartphones using Mobile Device Management (MDM). It centrally manages devices, sets policies and access rights, and remotely locks or wipes lost devices.

Things get complicated when company devices are used for personal purposes (COPE) or personal devices are used for work (BYOD). According to the GDPR, personal and business data must be strictly separated. Employees don’t want to hand over control of their vacation photos to IT, and administrators don’t want personal apps to access work contact information. While an MDM solution provides full control over the device, it does not resolve the issue of data separation. In addition, works councils and employee representatives typically scrutinize MDM implementations very critically and at great length.

Read more about this on the blog:
Why MDM Alone Does Not Provide Mobile Security.

The security model of the future: container technology

With container technology, all internal data is stored in an isolated, encrypted environment—on the device, on the network, and during transmission. It doesn’t matter whether the device is personal or provided by the organization.

Here’s how a container solution works: It adds an extra layer of security to the operating system. Emails, messaging apps, contacts, calendars, documents, notes, as well as access to network and line-of-business applications, all run within an encrypted environment—the container. The data is protected against unauthorized access, loss, and tampering, and cannot flow in or out unchecked.

GDPR-compliant protection: Private apps cannot be accessed from within the container. This prevents internal information from ending up on social media via copy and paste—and ensures that employees’ privacy remains protected.

An Overview of the Benefits of Container Solutions

• Easy access to organizational data using a smartphone or tablet
• Simple configuration and rapid rollout
• State-of-the-art encryption on the device and during transmission
• Suitable for COPE and BYOD scenarios
• Strict separation of work-related and personal data
• Full control over organizational data without compromising privacy
• Centralized management without interfering with device configuration

Experience container security for yourself: Try SecurePIM for free now.

Who in your organization benefits

• Users can download the app from the App Store or Google Play, sign in, and start working right away—no training required. They can continue to use their device for personal purposes without any restrictions.
• IT administrators manage the container through a management portal or an existing MDM. They set password policies, configure smart card usage, or disable copy-and-paste functions, and immediately delete work-related data in the event of loss or termination—without accessing personal data.
• CISOs and compliance officers can more easily enforce policies on mobile devices. A gateway prevents direct access to central servers from the Internet, thereby thwarting man-in-the-middle attacks. Works councils and employee representative committees typically approve these measures quickly.

Selection Criteria for Container Solutions

A suitable container solution should be based on an independently audited security framework and, in addition:

• be intuitive to use —optimized as an app for iOS and Android, with user interfaces modeled after native apps,
• Connect directly —without a VPN and without routing through a Network Operations Center—to Microsoft Exchange (ActiveSync) or HCL Domino, as well as through a secure gateway to file shares and the intranet,
• Use certified cryptographic standards —such as S/MIME, AES-256, SHA-256, or elliptic curve cryptography—instead of proprietary algorithms,
• Support smart cards —for hardware-based security, in which, for example, decryption is offloaded to the smart card.

SecurePIM: Everything Secure in One App

SecurePIM from Materna Virtual Solution isolates emails, messaging, contacts, calendars, intranet access, documents, notes, and tasks on iOS and Android devices within an encrypted container. Authentication is performed via password, PIN, biometrics, or smart card.

• SecurePIM Management Portal: Centrally Manage Security Rules and Users
• SecurePIM Gateway: Secure Connection to Exchange and the Intranet—Using Certificates, Without a VPN or MDM
• BSI-certified: All versions are based on the SERA security architecture, which has been certified by the BSI
• Classified Information Protection: Mobile Work Up to VS-NfD and NATO RESTRICTED
• Out-of-the-box GDPR-compliant and flexible for BYOD and COPE in mixed environments

Frequently Asked Questions

What is container technology in smartphones?
An encrypted, isolated area on the device where all work-related apps and data run. Personal apps do not have access to it.

If I use a container solution, do I still need an MDM?
In most cases, no. An MDM is still useful if you want to distribute your own apps, control app installations, or locate devices. SecurePIM can be combined with an existing MDM.

Is container technology GDPR-compliant?
Yes, it technically implements the separation of personal and work-related data required by the GDPR.

Is container technology suitable for BYOD?
Yes, because IT only manages the container, the personal device remains personal—which also makes it easier to obtain approval from the works council and the staff council.

For more information on BYOD models or working in the public sector, click here:

Implementing BYOD Models Simply and Securely

Mobile working in digital administration