BaselineWatch
Desk

4.1.2 Additional User Requirements

NIST platform security: roots of trust, firmware and secure enclaves SP 800-124 Rev. 1
All changes in this version
first version loaded 4 Applications part of 4.1

Title

Additional User Requirements

Control

Organizations often have additional security considerations for mobile devices that, while helpful in mitigating threats, cannot necessarily be directly enforced by the organization. Organizations should educate users on the importance of these additional security measures and define users’ responsibilities for implementing these measures in policy and mobile device agreements.

One possible security consideration involves wireless personal area networks (WPAN), which are small- scale wireless networks that require no infrastructure to operate. Examples of WPAN technologies are using a wireless keyboard or mouse with a computer, printing wirelessly, synchronizing a mobile device with a computer wirelessly, and using a wireless headset or earpiece with a smart phone. Commonly used types of WPAN technologies include Bluetooth and near-field communications. For devices within proximity of significant threats, mobile device users should enable these technologies only when needed to prevent misuse by unauthorized parties. Additional information on these security considerations is available from NIST SP 800-114, User’s Guide to Securing External Devices for Telework and Remote Access [SP800-114], and NIST SP 800-121 Revision 1, Guide to Bluetooth Security [SP800-121].