Manage your mobile enterprise more effectively

1. Managed Mobility Services:
Implementing a true mobile strategy
Manage your mobile enterprise more effectively
47012647USEN-00

2. © 2018 IBM Corporation 2
IBM Digital Workplace offerings help IT provide the capabilities
for the modern workforce.
IBM Mobile
Virtualization
Services
IBM Mobile
Collaboration
Services
IBM® Managed
Mobility Services
IBM Workplace
Support Services
with Watson®

3. © 2018 IBM Corporation 3
Consumer digital
experience
Traditional IT
environment
Mobility is a key component of the digital workplace.
Endpoints
Security
Analytics
Cloud
Endpoints
management
Users
Endpoints
Users
Legacy
Access to the application and data needed anywhere, anytime, from any device,, while delivering
a superb end user experience.

4. © 2018 IBM Corporation 4
The digital consumer experience is changing.
Modernized
systems and tooling
Modern, best-in-class
tools are less restrictive, security-
rich and help deliver needed
automation.
Self-enablement
Automation, excellent
self-service tools and a CSAT-driven
help desk foster self- sufficiency,
drive engagement and improve
employee satisfaction.
Choice of
modern devices
Modern device options
help translate into happier and
more productive employees.

5. © 2018 IBM Corporation 5
The path to mobile management has evolved over the years.
Devices
MDM
EMM
UEM
Endpoints
Devices, application and
content management Unified Endpoint ManagementMobile Device Management
Enterprise Mobility Management

6. © 2018 IBM Corporation 6
Key considerations for enabling a mobile workforce.
Can I integrate my UEM service with my
current content management
applications, such as Microsoft
SharePoint or Network File Share?
Can I limit access to
individual users?
How do I enable
secure browsing?
Am I able to monitor
mobile data usage?
Can I manage all of my devices?
Apple iOS and Mac, Google Android
and Chrome, Windows Phone,
Windows 7, Windows 8, Windows 10
Will I be able to protect
sensitive data?

7. © 2018 IBM Corporation 7
Optional considerations based on your specific requirements.
Containerization Do I need the ability to create and apply security controls to separate work and personal data?
Security-rich application access
(VPN)
Is it necessary to create a security-rich VPN/tunnel route to an enterprise server for access to
business data? Would the UEM solution be used to provide a VPN for the whole device or just for
individual application(s)?
Application wrapping Are additional security and control features required for Enterprise applications, i.e. restrict copy &
paste, enforce data encryption, require an app specific password. Application wrapping provides
these additional security features, which can be applied to different user groups.
There are two levels of application wrapping:
 Level 1: The UEM administrator uses the UEM solution to wrap the application, applying UEM-level security
controls to the application.
 Level 2: The application developer uses the UEM Software Development Kit to include additional
functionality, which can allow more granular security controls to be applied to the application.
Some public applications are “pre-wrapped” by the vendor and available in the public
application store.
Threat management Is a threat management system that detects, analyzes and remediates malware on mobile devices
a requirement for my enterprise?

8. © 2018 IBM Corporation 8
Optional considerations based on your specific requirements. (cont’d)
Security-rich email Would the ability to enable security-rich email that provides additional security controls using
an UEM-provided email application on the device be a requirement for my enterprise? Does my
organization need to control mobile email access based on the compliance posture of the device?
Security-rich document editing Would the ability to view and edit Microsoft Office documents using a special Office application
provided by the UEM vendor, providing additional security controls such as password protection or
restriction of “copy” or “paste” features, be a requirement for my enterprise?
Cloud document synchronization Would the ability to store documents/files in a cloud repository (such as Box, Dropbox,
Connections or the UEM provider’s cloud storage service) and more securely synchronize them
to devices using the UEM service be a requirement for my enterprise?
Telecom expense management Does my organization need the ability to track and report mobile data usage?
Security-rich chat Would an instant messaging (chat) using an UEM-provided chat application that stores data in
the container and provides additional security controls such as password protection or restriction
of “copy” or “paste” features be required?
Apple Mac, Windows PC and
Chromebook Management
Simple, low touch / modern management of Windows PCs, Apple Macs and Chromebooks using
UEM tools. Note that this does not provide a like for like replacement of traditional, full blown, PC
and Mac management tools. Alternative IBM offerings are available that can provide this if
necessary.

9. © 2018 IBM Corporation 9
Establishing your UEM program: SaaS or managed service?
+ As more organizations adopt UEM practices, there are two basic choices:
DIY or use a managed service.
+ Many UEM vendors provide software as a service (SaaS), which is designed
to be easy to set up.
Step 1 Step 2 Step 3 Step 4
Assess and go to the
vendor website.
Click on link
for no-charge trial offer.
Fill out necessary
information.
UEM server in the cloud
is created.

10. © 2018 IBM Corporation 10
Now comes the hard part: Configuring UEM components.
UEM server
in the cloud will
be created
Define the processes
and procedures required
to support the service
Enable the service
desk to support user
calls on UEM
Identify and configure applications
that will be needed by users in
the Enterprise Application Store
Configure optional components (for example,
secure browser, content management
and so on) – dependent on the full scope
of desired deployment
Define the
procedures
to handle
lost or stolen
devices
Define and
configure security
policies Produce and
maintain the device
enrollment guides
?
?
?
?
?
?
?
?

11. © 2018 IBM Corporation 11
Managed Mobility Services: The right path to UEM.
+ Configuring each of your required UEM components successfully by yourself can
require significant time, resources and money.
+ A managed mobility service model provides a strategic approach designed to ease
the cost and complexity of meeting UEM requirements.
The transition, or transformation, phase uses IBM’s deep
experience in project management and best practices.
Post-deployment, the steady-state phase delivers
ongoing support to run and manage the UEM service
using Business as Usual resources and processes.
 Architecture and design
 Build and configure
 Service model definition
 Test and pilot
 Production rollout
 Maintain
 Support
 Run

12. © 2018 IBM Corporation 12
A closer look at the transition phase in a managed services model.
Select and design Configure Define and produce Test or pilot Production rollout
 UEM vendor
 Hosting model
 Technical solution design
 UEM Gateway
design/sizing/scaling –
required for integration
with the customer’s
existing IT infrastructure
 Security profiles and
compliance policies
 Enterprise email
integration
 Enterprise app catalog
 Considerations specific
to each additional UEM
function to be enabled
 UEM enrolment
 Security profiles and
compliance policies
 Enterprise app catalog
 Active directory or LDAP
integration for identification
and authentication
 Certificate authority
integration
 Additional UEM
components to be enabled
 User enrolment instructions
or guides
 Service desk training or
enablement
 Interlock and engagement
process for other support
team
 Support model for the full
UEM service
 Device Retirement
(e.g. employee leaving)
 Lost/stolen device
 App updates
 Incidents
 Changes
 New starter process
 User move (between
Business Unit) process
 UEM infrastructure and
functions, including
gateways and connectors
 Mobile device
functionality with UEM
security and compliance
policies applied
 Additional UEM function
implemented
 App functionality
 User Acceptance Testing
(UAT) and Pilot of UEM
service before full
deployment
 Define rollout plan and
schedule
 Support initial bulk rollout
of UEM to users

13. © 2018 IBM Corporation 13
A closer look at the steady-state phase in a managed
services model.
Maintain Support Report
 Software upgrade/patching of UEM
Gateway servers
 Increase capacity of UEM Gateway servers,
if required
 UEM vendor escalation for cloud outages
and problem reporting/fixes
 Process maintenance and updates for
managing enterprise mobility users
- New starter process
- Mover process
- Leaver process
- Lost or stolen device process
- Application management process
- Service Desk guide
 Initial service deployment support
(assumption that a certain percentage of
users enrolling to UEM need help)
 Ongoing user support (for example, how to
answer questions, reset pass code, change
devices, out-of-compliance devices)
 Support for gateway outages, including
after-hours support
 Provide regular report on UEM service
- Application upgrades
- Vendor infrastructure outages
- Mobility application server capacity
- Compliance and application licensing

14. © 2018 IBM Corporation 14
Engaging Managed Mobility Services from IBM.
+ IBM helps you build a mobility strategy, tailored to your technology and business
requirements. Our skilled resources, global reach and key vendor alliances can reduce
costs and decrease overhead. Predictable subscription pricing helps you proactively
budget and maintain flexibility.
+ A Managed Mobility Service from IBM also provides the following benefits:
 Subject matter experts
 IBM best practices
 Dedicated UEM teams
 Full-service managed UEM
Step 1
Enable your UEM strategy
Step 2
Partner with IBM® Managed Mobility Services

15. © 2018 IBM Corporation 15
+ Join the conversation on YouTube, LinkedIn, Facebook and Twitter.
Take the first step.
+ Contact an IBM mobility specialist to discuss how IBM Managed Mobility Services can
determine the best approach for your organization.
+ Learn more: For more information about IBM Managed Mobility Services, visit our website.

16. © 2018 IBM Corporation 16
Trademarks and notes
@Copyright IBM Corporation 2018
IBM corporation
New Orchard Road
Armonk, NY 10504
+ IBM, the IBM logo, ibm.com, and Watson are trademarks or registered trademarks of International Business Machines Corp., registered in many jurisdictions
worldwide. Other product and service names might be trademarks of IBM or other companies. A current list of IBM trademarks is available on the web at
“Copyright and trademark information” at www.ibm.com/legal/copytrade.shtml
+ Microsoft, Windows, Windows NT, and the Windows logo are trademarks of Microsoft Corporation in the United States, other countries, or both.
+ This document is current as of the initial date of publication and may be changed by IBM at any time. Not all offerings are available in every country in which
IBM operates.
+ The performance data discussed herein is presented as derived under specific operating conditions. Actual results may vary.
+ THE INFORMATION IN THIS DOCUMENT IS PROVIDED “AS IS” WITHOUT ANY WARRANTY, EXPRESS OR IMPLIED, INCLUDING WITHOUT ANY
WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND ANY WARRANTY OR CONDITION OF NON-INFRINGEMENT.
IBM products are warranted according to the terms and conditions of the agreements under which they are provided.
+ Statement of Good Security Practices: IT system security involves protecting systems and information through prevention, detection and response to improper
access from within and outside your enterprise. Improper access can result in information being altered, destroyed, misappropriated or misused or can result in
damage to or misuse of your systems, including for use in attacks on others. No IT system or product should be considered completely secure and no single
product, service or security measure can be completely effective in preventing improper use or access. IBM systems, products and services are designed to be
part of a lawful, comprehensive security approach, which will necessarily involve additional operational procedures, and may require other systems, products or
services to be most effective. IBM DOES NOT WARRANT THAT ANY SYSTEMS, PRODUCTS OR SERVICES ARE IMMUNE FROM, OR WILL MAKE YOUR
ENTERPRISE IMMUNE FROM, THE MALICIOUS OR ILLEGAL CONDUCT OF ANY PARTY.

17. Thank you