Slide 1

NASA Bring Your Own Device (BYOD) Team Presented By: John Sprague Enterprise Applications Service Executive 5/13/2014

Slide 2

BYOD Charter Purpose and Scope Develop a personally owned device policy (non- government provided) Specifically: a recommended policy memorandum and changes to existing NASA publications/regulations Scope covers all personally owned desktop, laptop, tablet, phone/smartphone and other personal or subsidized devices used within NASA Page 1

Slide 3

Charter Composition, Roles, and Responsibilities Sponsors are: NASA Associate CIO for Enterprise Services and Integration Division and the CTO for IT Team Champion: End User Service Executive Team Members: Team Lead, Deputy, representatives from Centers, Mission Directorates, OCIO Innovation and Tech Division, Strategic Integration Management, Security, ICAM, Center for Internal Mobile Apps, Enterprise Service Desk, Union, Office of General Counsel and ad-hoc participants Team member time commitment estimated to be 1-2 days a week until released by the IT Management Board Page 2

Slide 4

BYOD Focus Areas Progress Tracking 1. Monthly stakeholder status, coordinate with Mobile Device Management (MDM) Team, and report at Office of CIO Monthly Status Review 2. Identify/benchmark other agencies 3. Review MDM and IEEE 802.1x (port-based Network Access Control) team charters 4. Identify NASA publications, regulations, NIST Standards Page 3 Note: Team Leads are in Bold

Slide 5

BYOD Status Progress Tracking 5. Develop communication plan 6. Identify Risks 7. Identify use cases. See examples on next slide 8. Develop business case 9. Recommend infrastructure changes Page 4

Slide 6

7. Identify Use Cases Sub Team Identified BYOD use cases and standard description information required for each use case. Use cases: Visiting Scientists/experts Interns Vendors Employees Description Information Duration Vetted identity or not Risk Levels Access and usage patterns Data types Page 5

Slide 7

BYOD Status Progress Tracking 10. Recommendation of incentives 11. Draft policy turned in Boards Costs Policy Comply with Minimum Security Requirements for Personal Mobile Devices memorandum Capabilities of what is authorized for GFE and User Devices Includes: Frequently Asked Questions Page 6

Slide 8

BYOD Survey Questions 5 questions and demographic info covering what users want to use BYOD for at work, frequency, etc. How it would be administered Sent via Survey Monkey Communication Sub Team would compile results Question could be compared to a follow up survey next year Page 7

Slide 9

Panel Discussion Questions What are the trends in BYOD? What are the difficulties in adopting BYOD? Are there real cost savings for Agencies? Page 8

Slide 10

Page 9