Data
Policy andManagementfor Beginners

Now more than ever, businesses are supporting remote and hybrid
workers and they require more than just the basics of device
management. Corporate mobile devices provide the freedom to work
anytime, anywhere, but with this flexibility comes the drain of personal
use and behavior on company devices, even on personally enabled
devices on your cellular plan.
Jamf helps organizations enable and maintain remote work by ensuringthat users remain productive, regardless of where users are locatedand what devices they’re using as they shift to hybrid and remoteenvironments.
By leveraging the following technologies, organizations can:• Implement customizable policies to ensure compliance• Configure data capping and alert thresholds• Filter inappropriate content• Extend policies to all network communications• Monitor for and eliminate shadow IT• Manage usage in real time

Learn what you need to know toestablish an Acceptable Use policy
and manage your company dataand devices in a way that supports
your company and end-user needs.

Managing devices is often seen as a very science-driven endeavor.
Once backed by all sorts of data to arrive at the optimal managementlevel to ensure devices, users, and data are protected and remain thatway. And while that fact is not in dispute here, there is a bit of “magic” tobeing a successful administrator. Something that comes from experienceand a thorough understanding of your network’s unique needs. After all,despite the standards and best practices, each network is truly its own
island operating under the specific policies of its organization.
“There’s no such thing as magic!” — Uncle Vernon
Doesn’t it feel magical when your devices are performing optimally?
That data is secure, corporate applications and resources are accessible,yet protected. And users are happy, with the ability to use secured
devices to perform work and personal tasks, without heavy-handed
management practices preventing them from being productive orenjoying their downtime. How about when issues are detected, yet risk
is mitigated through automation without IT having to lift a finger or theend user being negatively impacted?

That is the sort of magic that’s wielded by Jamf admins. Going beyond
the basics, Jamf Protect’s data policy solution supports organizations inremote and hybrid work environments. Regardless of the device typeor whether they are personal devices as part of a BYOD (bring yourown device) initiative or a corporate-owned fleet is essential to have anAcceptable Use policy and place as well as the means to manage andenforce it.
Here’s a starting point for creating or assessing your Acceptable Use
policy. Consider how your organization can:• Empower your admins to monitor data consumption with real-time
analytics and granular reporting• Enforce acceptable usage policies• Eliminate shadow IT• Filter content• Implement customized protective policies to meet the needs of yourusers and organization• Holistically support your network regardless of the device orownership type

HARRY POTTERVS VOLDEMORT
Before diving into the data policy features of Jamf Protect, let’s touchon some of the reasons why it’s necessary to help your organization inmanaging the mobile fleet of devices on your network. And what betterway to describe the use case than by invoking the greatest of themodern magicians, Harry….Potter, that’s right!
In the series of books written by author J.K. Rowling, the wizards of
the Pottermore universe share similarities with IT and security adminsin that, they are presented with a choice: be like Voldemort or be like
Harry — stay with us.
If you choose the way of Voldemort, your organization would rule with
an iron fist, forcing users to adapt to your policies despite their needs
or the unintended consequences.

But if you choose to fashion yourself after Harry, your organization
would operate with fairness, opting to err on the side of compromise
while working together to solve the greater problem.
“We must all face the choice between what is right and what is easy.”– Albus Dumbledore
While it is easy for admins to choose the Voldemort path in the name ofsecurity and protecting users, the sad reality remains that often – thelatter path presents more options to achieve data security and protect
users since all stakeholders are working together to achieve thiscommon goal and not fighting against excessive or restrictive controlsthat do little more than stifle productivity and ultimately alienate users.
As mentioned earlier, every network is different and adheres toa different set of rules, policies, laws and regulations than the next. So
when it comes to data policies and management, there is no “onesize-fits-all” answer. But with that in mind, administering devices in theVoldemort method will surely do nothing more than pigeonhole admins,
effectively eliminating the fluidity necessary to monitor, detect, respondand remediate any potential issues encountered in the dynamic worldof information technology. Wouldn’t you agree?

THE ELDER
WAND
Like Harry Potter, IT and security admins
are just people. Everyday regular people
with skills that, while formidable, needa way to be channeled to be usedeffectively. Harry had the Elder Wand.
You have Jamf.
Specifically, we’ll drill down on two
features that provide organizations
the necessary defensive protections
to comprehensively manage theirmobile devices in a consistent andefficient manner.

REAL-TIME POLICY CONTROL
Configuring cap policies for data usage and applying them whenthresholds are reached, defining which websites, services and apps
can be accessed and providing visibility into usage with categorybased controls – in addition to customizing them to trigger automationof policy enforcement — provide a glimpse into how organizational
policies can be curated to restrict access to inappropriate content andapps that are not deemed business critical.
Over 50% of corporate data usage is not business critical, according
to Jamf. This unprecedented level of visibility into data usage allows
organizations to granularly configure data pools and network-based
traffic use so that mobile devices are considered tools rather thanobjects that are to be abused due to lack of insight or controls.

“Time will not slow downwhen something unpleasantlies ahead.”– Harry Potter and the Goblet of FireANY MOBILE DEVICE, ANY OWNERSHIP MODEL
BYOD. CYOD. COPE. This bouillabaisse of acronyms all refers to mobile
device programs that indicate varying degrees of support by program
model. If figuring out which ownership model to support wasn’t difficult
enough on its own, the variety of different mobile device types, vendors
and carriers will surely serve to complicate matters further, right?
Not for Jamf Protect, it won’t.
The only decision your organization needs to make is choosing which
devices are best for your business. Regardless of the device type,ownership model or operating system, Jamf supports the gamut ofthese choices, allowing admins to focus on managing mobile devices
with the utmost attention devoted to security and compliance policies.

THE CLOAK OF INVISIBILITY
From an IT perspective, having a cloak that makes you invisible could
be helpful when too many tickets are coming in at once. Imagine
putting your head down and solely focusing on resolving issues insteadof fielding wave after wave of emails, texts, calls and “quick questions”?
Well, if this speaks to you, there are a couple more features that might
be of interest in helping to stem the tidal wave of requests throughstandardizing resource usage, enforcing compliance and settinguser expectations.

FULLY CUSTOMIZABLE
No two networks are the same, and no two organizations will manage
their requirements or infrastructure in the same manner. Largely,differences depend on the organization’s risk appetite. And similar to
how enterprises modify their security posture to address risk, Jamf
allows for full customization of policies and how they’re implementedfor management.
From tailoring content filtering categories to customizing allow andblock lists, policies can be applied holistically (the organization asa whole) to granularly, applying to a single user — or through groupmembership — the choices are flexible and work to address the needsof your organization. And most importantly, the choice is yours to make.

CONTENT FILTERING
Adult and gambling apps and services are significantly more likely
to rely on unencrypted connections that may potentially expose
organizations to risk through data leaks and compliance with regulatory
bodies. Moving beyond the noted categories above, accessing content
that contains weapons, hate speech or other forms of inflammatory
materials may pose real civil and/or criminal consequences for users
and/or the organization.
Not to mention the security threats that come from web-based content,such as phishing websites and other forms of malware that make theirhome across the four corners of the vast internet. Content filtering
isn’t solely about keeping the bad stuff out. If used proactively, it
can be about only permitting the authorized data in by ensuring that
acceptable websites, services and apps are reachable.
Furthermore, it is essential to reduce exposure to litigation by
managing and maintaining compliant data usage and monitoring forand blocking access to unsanctioned services. Services like shadow IT
can work to undermine the security posture of your devices and yournetwork by inadvertently exposing sensitive corporate data.

THE PHILOSOPHER’S STONEThis section won’t discuss the formula to brew the elixir of life nor
how to turn common metals into gold, sadly, but it will discuss the next
best thing: two more Jamf Protect features that — in their own way —perform their own bit of magic. By gathering real-time insights, IT andsecurity admins can turn that data into actionable tasks used to better
adapt to and manage their fleet.
Going even further, the features make protections network aware,meaning that regardless of whether new sessions are spawned, or
existing connections are closed, your devices and users will remain
protected and compliant across all network connection types.

NETWORK AWARE
As we’ve established, one size most definitely does not fit all. Nothingembraces this concept more than the network connections on yourmobile device. For example, when users are required to utilize meteredcellular connections, they will often be more cognizant of usage limits
due to additional charges they may incur from roaming and/or overagefees. However, if they can connect to a public Wi-Fi hotspot, chances
are great that bandwidth concerns will not be a concern.
Jamf Protect clears up managing these murky waters by allowing
admins to create and enforce policies for different network connection
types and their unique variables.
Say your organization supports the COPE (corporate-owned, personallyenabled) model and provides mobile devices to your employees forboth work and personal use, however the cellular data plan is part ofa data pool that’s shared by all users. Your organization may want to
restrict the bandwidth utilized by users so there’s enough data to goaround for everyone while on cellular, without instituting bandwidth
management on Wi-Fi connections. Jamf Protect allows policies thatcan be implemented to do just that: limit bandwidth while on cellular
but not Wi-Fi. Furthermore, the policies are smart enough to detectwhich connection is currently in use and adjust automatically without
additional input from admins or impacting the end-user’s experience.

REAL-TIME INSIGHTS“I solemnly swear I am up to no good.” — Harry Potter
Ask any admin if they’d prefer to know when something is goingto break or outright fail before it occurs (proactive) or after it does
(reactive), and the answer will likely always be the same: they want toknow beforehand.
Given the option, anyone would want to have a heads-up notice. If not
to attempt to curb the event from happening, then to at least mitigate itas quickly as possible.
Huzzah! Jamf’s real-time insights provide just that: preemptive noticethrough granular reporting that provides IT transparency over how
devices are using their data and over which connections. Admins
can proactively modify policies that may need to be more (or less)restrictive, make changes to existing data pools, configure content
filtering to enable/disable access to certain apps and services, or
simply just keep a watchful eye over a device’s security posture.

NOW BOARDING ON
PLATFORM 9¾
Having your mobile device fleet or users’ personal devices enrolled inJamf Pro is an excellent foundation for device management. But in today’s
modern work environments that center around hybrid or remote work,
simply managing the physical device requires a more specialized tool.
With Jamf, you can:• Manage how data is sent and received on the device itself throughsmart policies that are network aware• Adhere to compliance regulations over any network connection• Filter content with seventy intelligently designed templates to prevent
devices from connecting to vulnerable, compromise and malicious
websites, apps and services in addition to unapproved content

Lastly, data policy and managementwith Jamf Protect makes the job of
IT and security admins simpler byeliminating shadow IT and enforcing
acceptable usage policies for all devices– regardless of ownership level – tonot only secure but also devices andusers without disrupting the experiencefor stakeholders.

Request Trial
Get started today with a free trial,or contact your preferred reseller.