Securing Mobile Devices and Applications

Here are the topics we'll cover.

1. Mobile Computing Fundamentals
   • Definitions, principles, and unique characteristics
   • Hardware and software components
   • Mobile applications and important statistics
2. Mobile Payments
   • Mobile payment statistics and trends
   • Wallets and key providers
3. Wireless Network Fundamentals
   • Types, characteristics, and areas of focus
   • Wireless Application Protocol (WAP)
   • 5G and Bluetooth
4. Connectivity Risks
   • Wireless network risks
   • Signaling System 7 (SS7) and Bluetooth security risks
5. Mobile Security
   • Key actions for payment application data security
   • PCI data security standard
   • NIST mobile device security and privacy controls
   • Common on-device mobile security technologies and essential controls
   • CIS Controls Mobile Companion Guide
   • ISO 27002 Information Security Management
6. Mobile Device Management (MDM) Solutions
   • Mobile Device Management (MDM) requirements
   • Enterprise Mobility Management (EMM), Unified Endpoint Management (UEM), and Mobile Application Management (MAM) key components and practices
   • Mobile Threat Defense (MTD) implications for devices, networks and applications
7. Mobile Security
   • Cloning, SIM hijacking, jailbreaking, and rooting
   • Mobile security trends, online attacks, and dangerous popular apps
   • Ways to work securely from home and improve Bring Your Own Device (BYOD) policies and programs
8. Mobile Threats / Common Attacks
   • Mobile fraud and other top threats
   • NIST Mobile Threat Catalogue
   • Attack and defense approaches
9. Vulnerability Management
   • Definitions and key considerations
   • Essential vulnerability management program techniques
10. Secure Mobile Application Development Fundamentals

• In-demand mobile app features and evolving trends
• App development challenges
• Key components of application systems development, Software Development Kits (SDKs), and sandboxing
• Certificates, mobile app languages, testing, and Software Application Maturity Model (SAMM)
• Risk considerations, application security models, controls, and best practices

11. Documenting the Data Flow

• Data flow diagrams and tips for assessing them
• EFT and ACH fund transfers, participants, credits, and debits
• Securing data at rest and in motion

12. Penetration Testing

• Definitions, types, and key approaches
• Vulnerability scanning vs. penetration testing
• Best practices and testing tools

13. Incident Response (IR)

• Incidents vs. breaches, and notification requirements
• The incident response life cycle
• Incident response policies, preparation, and testing

14. Business Continuity Planning (BCP)

• Mobile strategies, risks, controls, and overall governance
• Key considerations and practices

15. Audit Considerations

• Objectives, scope, risks and essential controls
• Important considerations and reviewing the supply chain
• Important audit steps and documents