<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=us-ascii"><meta name=Generator content="Microsoft Word 14 (filtered medium)"><title>Re: [itdiscuss] Smart Phone Security</title><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
@font-face
{font-family:Verdana;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
/* List Definitions */
@list l0
{mso-list-id:332953238;
mso-list-type:hybrid;
mso-list-template-ids:-1073716566 916520794 67698691 67698693 67698689 67698691 67698693 67698689 67698691 67698693;}
@list l0:level1
{mso-level-start-at:16;
mso-level-number-format:bullet;
mso-level-text:\F0B7;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Symbol;
mso-fareast-font-family:Calibri;
mso-bidi-font-family:"Times New Roman";}
@list l0:level2
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:"Courier New";}
@list l0:level3
{mso-level-tab-stop:1.5in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level4
{mso-level-tab-stop:2.0in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level5
{mso-level-tab-stop:2.5in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level6
{mso-level-tab-stop:3.0in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level7
{mso-level-tab-stop:3.5in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level8
{mso-level-tab-stop:4.0in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level9
{mso-level-tab-stop:4.5in;
mso-level-number-position:left;
text-indent:-.25in;}
ol
{margin-bottom:0in;}
ul
{margin-bottom:0in;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=EN-US link=blue vlink=purple><div class=WordSection1><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>We currently enforce passwords on all mobile devices using activesync to hit exchange. It’s not that big of a deal since you can usually set the timeout value pretty high. Our users haven’t complained about it (almost 40 iphone users and 4 Pre)<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><b><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif";color:black'>Jason</span></b><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif";color:black'> Powell<br>IT Director<br>Granger Community Church<br></span><span style='font-size:8.0pt;font-family:"Tahoma","sans-serif";color:black'>630 E. University Drive</span><span style='color:#1F497D'><br></span><span style='font-size:8.0pt;font-family:"Tahoma","sans-serif";color:black'>Granger, IN 46530<br>574.243.2022 • <a href="mailto:jpowell@gccwired.com">jpowell@gccwired.com</a> • GCCwired.com<br><a href="http://jpowell.blogs.com/" title="http://jpowell.blogs.com/">http://jpowell.blogs.com</a> - yup, I've got a blog<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:8.0pt;font-family:"Tahoma","sans-serif";color:black'><a href="http://twitter.com/JasonPowell">http://twitter.com/JasonPowell</a> - My twitter feed<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:8.0pt;font-family:"Tahoma","sans-serif";color:black'><a href="http://facebook.com/jason.powell">http://facebook.com/jason.powell</a> - My facebook page<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><o:p> </o:p></span></p><div><div style='border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in'><p class=MsoNormal><b><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'>From:</span></b><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'> discuss-bounces@itdiscuss.org [mailto:discuss-bounces@itdiscuss.org] <b>On Behalf Of </b>Jay Betancourt<br><b>Sent:</b> Tuesday, December 01, 2009 7:44 PM<br><b>To:</b> IT Discussion Forum<br><b>Subject:</b> Re: [itdiscuss] Smart Phone Security<o:p></o:p></span></p></div></div><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal style='margin-bottom:12.0pt'><span style='font-size:10.0pt;font-family:"Verdana","sans-serif"'>Hi Dave,<br><br>Sorry to hear about that situation. We tell our iPhone users to password protect their devices in the event of loss or theft. However, we do not require it. Instead, users are shown how to automatically wipe the device from their Outlook Web Access in the event that such situation should occur. While it’s a hassle to have to enter the password every time, it’s probably well worth it in case it falls into the wrong hands. It’s probably not a good idea to keep contact information on the SIM card and instead store it on the phone locally since it’s synchronizing with the Exchange server.<br><br>Jay<br><br>On 12/1/09 6:26 PM, "Dave Ketcham" <<a href="dketcham@northcoastchurch.com">dketcham@northcoastchurch.com</a>> wrote:</span><o:p></o:p></p><p class=MsoNormal style='margin-bottom:12.0pt'><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>We recently had one of our staff's iPhones stolen and it was not password protected and emails were deleted by the thief. We currently aren't implementing any "Mobile Device" security features on our Exchange 2003 server.<br> <br>What mobile device policies do you implement? Do you require device unlock passwords? etc?<br> <br>Dave Ketcham<br>North Coast Church</span><o:p></o:p></p></div></body></html>