Mobile XI Recommendations
For machines and devices running Mobile XI, the application provides users with access to an important asset of the organization: its GIS data. As such, it is important to secure that data against theft.
For Windows, refer to Microsoft's documentation on BitLocker.
Recommendations specifically for securing client devices:
-
Enable full disk encryption on devices that host Solution Center.
-
Configure screen lock timeout for a maximum of five minutes.
-
For Windows specific settings:
-
Do not grant local administrator privileges to end users.
-
Do not grant end-user account permissions to install applications.
-
Use application “allow-listing” to permit only approved applications or executables to run.
-
Use real-time endpoint protection to detect unauthorized changes to installed components.
-
Schneider Electric recommends you give users access only to secure locations determined by your IT department. File permissions are managed by the user’s Windows profile.
-