Best Security Practices for a Bank Holding Company

[KapsBB]

I work at a bank holding company, so we have many users with very sensitive data on their BlackBerry. I am wondering what would be the best policies and restrictions to implement in order to make sure all the data is secure on the BB especially if it is lost. These are our current security policies in place. We are running BES 5.0.

Password
Password Pattern Checks - No Restrictions
Maximum Password Age - 90 Days
Maximum Security Timeout - 15 Minutes
Minimum Password Length - 6
Password Required - Yes
Maximum Password History - 4
Suppress Password Echo - Yes
Maximum Password Attempts - 8
Password Timeout - 15 Minutes

Security
Disallow Third Party Applications Downloads - No

[Tõnis]

Hmmm. I'm no admin, but I'm surprised by some of these settings. Here's what I'd do: apply a 1 minute security timeout (or 5 minutes max if they won't stand still for the one minute t/o). Also, make sure content protection is enabled (address book included) and that media card files are encrypted if the cards are in use. Sorry if these suggestions are elementary.

Posted from my CrackBerry at wapforums.crackberry.com

[bravedeeds]

Content protection would also be a good idea ;-)

[Tõnis]

Originally Posted by bravedeeds

Content protection would also be a good idea ;-)

Indispensable!

Posted from my CrackBerry at wapforums.crackberry.com