Mobile Device (iOS / Android) Security Baseline

The set of essential security controls that should be present on mobile devices used in the enterprise (iOS/Android, corporate and BYOD): MDM/UEM enrollment and compliance, device hardening (encryption, passcode, OS version), jailbreak/root detection, application and data protection (MAM, work/personal separation), conditional access and remote wipe. The framework is SANS CIS Controls v8; the concrete values are drawn from the CIS iOS/Android Benchmark and the NIST SP 1800-22 BYOD guide.