Workspace ONE security standards
VMware has raised the security standards of Workspace ONE. For military, federal and government bodies, and for insurers and banks, this is an essential requirement of their IT.
VMware has raised the security standards of Workspace ONE. The security of IT systems matters to companies of every size and in every industry. For military, federal and government bodies, and for insurers and banks in particular, it is an essential requirement of their IT. To meet those requirements, VMware has aligned Workspace ONE Cloud Services with NIST SP 800-171.
NIST SP 800-171
NIST SP 800-171 is a framework from the United States National Institute of Standards and Technology (NIST). It defines the security requirements for systems and data that are processed, stored or transmitted by non-governmental organisations and can nevertheless be classified as sensitive or confidential.
The 14 areas of the NIST requirements
VMware Workspace ONE Cloud Services
VMware Workspace ONE Cloud Services is a cloud-based platform that helps companies make their people more productive while keeping the working environment secure. It gives companies a solution they can trust, protecting their data and systems from threats by meeting the requirements of the NIST SP 800-171 framework.
Aligning with NIST SP 800-171 involves a thorough risk assessment, in which a company’s security requirements are analysed and identified. Based on that assessment, appropriate security measures and controls are implemented to make sure sensitive data and systems are protected.
To keep NIST SP 800-171 compliance in place, VMware runs regular reviews and tests. VMware works continuously on improving its security measures and controls, to keep up with threats that keep changing.
Taken together, aligning Workspace ONE Cloud Services with NIST SP 800-171 gives companies a reliable and secure platform that meets the requirements of industries such as the military, government and finance while providing a productive working environment.
The VMware IT security framework
ISO 27001
VMware Workspace ONE Cloud Services is also certified to ISO 27001, an internationally recognised standard defining the requirements for an information security management system. The certification confirms that VMware maintains an appropriate level of security and manages information security risks effectively.
Incident management
In the event of a security breach, VMware has an incident management and response policy, so that the critical elements of an incident’s whole lifecycle are managed in a structured and effective way. The policy and the procedures behind it cover the main aspects of incident response: monitoring and reporting, forensics and remediation. Any suspicious or unusual activity is reported to the incident response team, which then takes the appropriate steps.
Incidents are categorised and resolved by the respective cloud operations teams. Where necessary, issues are escalated to management following a predefined protocol. VMware tracks alerts, responses and resolutions through to final closure. On top of that, the incident response team produces post-mortem reports for review by internal stakeholders and the information security governance committee.
The VMware incident response cycle
In short, VMware’s commitment to information security and compliance shows that Workspace ONE Cloud Services is a solid and trustworthy solution for companies working in sensitive industries. With NIST SP 800-171 compliance, ISO 27001 certification and an established incident management and response policy, VMware shows that the security and protection of its customers’ data matters to it.
Architecture
VMware Workspace ONE Cloud Services is built on a layered architecture, which allows thorough security controls at several levels. Each layer provides protections that keep data and resources confidential, intact and available.
Infrastructure
At the infrastructure layer, VMware Workspace ONE Cloud Services uses a secure, robust and scalable cloud infrastructure provided by Amazon Web Services (AWS) and Microsoft Azure. Both are leaders in implementing cloud infrastructure and have extensive experience in information security.
Application
Authorisation is implemented in the service, so that only authorised users reach the applications and data. VMware Workspace ONE Cloud Services also supports single sign-on (SSO), which simplifies user access and improves security.
Further security features
VMware Workspace ONE Cloud Services offers a broad range of security features shaped around what companies need, among them:
- Mobile device management (MDM)
- Manages and secures mobile devices.
- Mobile application management (MAM)
- Manages and secures mobile applications.
- Identity and access management (IAM)
- Manages user identities and access rights.
- Unified endpoint management (UEM)
- Manages every endpoint in an organisation, mobile devices and desktops alike.
In summary
VMware Workspace ONE Cloud Services offers a thorough security solution for companies looking for a secure and trustworthy way to manage their mobile devices and applications. With a broad range of security features, a layered architecture, a secure cloud infrastructure and an established incident management and response policy, it is a robust and reliable platform for managing mobile devices and securing company data.
References
A list of references on Workspace ONE Cloud Services and NIST SP 800-171 compliance:
- NIST SP 800-171: Protecting Controlled Unclassified Information in Nonfederal Systems and Organizations
- VMware TechZone: Workspace ONE Cloud Services Alignment to NIST SP 800-171
- VMware Workspace ONE Documentation: Workspace ONE UEM Security Technical Overview
- VMware Workspace ONE Documentation: Workspace ONE Identity Manager Security Configuration
- VMware Workspace ONE Documentation: Workspace ONE UEM Mobile Application Management Guide
- VMware Workspace ONE Documentation: Workspace ONE Access with Multifactor Authentication Configuration
These references help companies find out about the various aspects of Workspace ONE Cloud Services and its alignment with NIST SP 800-171. They carry a wealth of information about the features and security characteristics of Workspace ONE Cloud Services, along with guidance and configuration instructions for implementing and managing them.
Next steps
As a VMware Principal Partner, soulTec is the right partner for designing and implementing VMware Workspace ONE Cloud Services. We have a good number of certified experts to see a project like that through. Get in touch, no strings attached.