Evaluating Mobile App Vetting Integration with Enterprise Mobility Management in the Enterprise [open pdf - 1MB]
From the Executive Summary: "Federal agencies increasingly use mobile devices and mobile applications (apps) to meet their mission and business needs and improve productivity and efficiency. The ubiquity of mobile apps and the increased reliance on their use has a counter side, however. Mobile apps pose substantial risk to federal enterprises because of their potential for exploitable vulnerabilities, malicious code, or privacy-violating behaviors and should be deployed with care. [...] This report provides the results of HSSEDI's [Homeland Security Systems Engineering and Development Institute] evaluation of the integration of app vetting capabilities with EMM [enterprise mobility management], conducted between November 2018 and May 2019. It builds on prior work described in MITRE Technical Report 160242, 'Analyzing the Effectiveness of App Vetting Tools in the Enterprise' , which focuses on the ability of mobile app vetting tools to find vulnerabilities and privacy violating and malicious behaviors in mobile apps. This report presents background information on EMM, app vetting, and MTD [mobile threat detection] tools and describes the requirements and evaluation criteria generated for the assessment."
Department of Homeland Security: http://www.dhs.gov/