iPhone: Enterprise-worthy, perhaps, but secure enough for feds?

iPhone Version 3.1 offers greater security, but some doubt that it’s secure enough for widespread government use

Some of Apple’s recent modifications to the iPhone operating system have made the iPhone enterprise-worthy, according to some network analysts. But it still may be too unsecure for some federal customers.

The first iteration of the iPhone software, back in July 2007, had no corporate e-mail or security support, said Ted Schadler, an analyst with Forrester Research. But two years later, iPhone Version 3.0 offered much more enterprise support for security and policy administration, he said. It allows organizations to turn the iPhone’s camera off and to require stronger password protection, Schadler said.

Then, this October, iPhone Version 3.1 fixed some additional lingering security problems. One of the remaining security stumbling blocks for the iPhone is that application management — the ability to push software updates to an iPhone to make sure that new applications or policies are installed — does not exist. Research in Motion’s BlackBerry had this capability from the start, and information technology departments are notorious for wanting this sort of control down to the device level. But iPhone users have to update their software using iTunes or the iPhone Configuration Utility, Schadler said.

Schadler says that some government agencies, those without classified networks or extremely sensitive information, might want to consider adopting the iPhone for enterprise use.

Not so fast, says Martha Vazquez, a network security research analyst for Frost & Sullivan. Though the iPhone “may have raised the bar enough to enter the enterprise, we believe that it falls short of meeting government requirements, such as FIPS [Federal Information Processing Standard] 140-2 certifications and other common criteria that are needed," she said.

BlackBerry, by contrast, has more than 450 policies that let IT departments control what users can do on their BlackBerry devices, Vazquez said. Further, BlackBerry security features such as code signing—the process of digitally signing executables and scripts to confirm software authorship and integrity — are not available on the iPhone. Nor does the iPhone allow for the installation of anti-malware software, Vazquez said.

About the Author

Trudy Walsh is a senior writer for GCN.

Featured

  • Contracting
    8 prototypes of the border walls as tweeted by CBP San Diego

    DHS contractors face protests – on the streets

    Tech companies are facing protests internally from workers and externally from activists about doing for government amid controversial policies like "zero tolerance" for illegal immigration.

  • Workforce
    By Mark Van Scyoc Royalty-free stock photo ID: 285175268

    At OPM, Weichert pushes direct hire, pay agent changes

    Margaret Weichert, now acting director of the Office of Personnel Management, is clearing agencies to make direct hires in IT, cyber and other tech fields and is changing pay for specialized occupations.

  • Cloud
    Shutterstock ID ID: 222190471 By wk1003mike

    IBM protests JEDI cloud deal

    As the deadline to submit bids on the Pentagon's $10 billion, 10-year warfighter cloud deal draws near, IBM announced a legal protest.

Stay Connected

FCW Update

Sign up for our newsletter.

I agree to this site's Privacy Policy.