implementing-mobile-application-management

name	implementing-mobile-application-management
description	Implements Mobile Application Management (MAM) policies to protect enterprise data on managed and unmanaged mobile devices through app-level controls including data loss prevention, selective wipe, app configuration, and containerization. Use when securing corporate apps on BYOD devices, implementing Intune App Protection Policies, or enforcing data separation between personal and work apps.
domain	cybersecurity
tags	["mobile-security","android","ios","mam","enterprise-security","owasp-mobile"]
subdomain	mobile-security
author	oyi77
version	1.0.0
license	Apache-2.0
nist_csf	["PR.PS-01","PR.AA-05","ID.RA-01","DE.CM-09"]

Implementing Mobile Application Management

Overview

Cybersecurity skill for implementing mobile application management. Follows industry best practices and security standards.

When to Use

Trigger phrases:

• "implementing mobile application management"
• "Deploying enterprise mobile app protection without full device management (MDM)"
• "Implementing BYOD policies that protect corporate data while respecting personal"
• "Configuring Microsoft Intune App Protection Policies for iOS and Android"

Use this skill when:

• Deploying enterprise mobile app protection without full device management (MDM)
• Implementing BYOD policies that protect corporate data while respecting personal privacy
• Configuring Microsoft Intune App Protection Policies for iOS and Android
• Enforcing data loss prevention controls on managed mobile applications

Do not use when full device management (MDM) is already deployed and sufficient -- MAM adds complexity when MDM already provides the needed controls.

When NOT to Use

• When you lack proper authorization for testing
• For production systems without change management
• When the task requires legal or compliance expertise beyond technical scope

Prerequisites

• Microsoft Intune or equivalent MAM platform (VMware Workspace ONE, MobileIron)
• Azure AD for identity and conditional access policies
• Intune App SDK integrated into target applications (or Intune App Wrapping Tool)
• Test devices (Android 10+ and iOS 15+)
• Azure AD Premium P1 or P2 licenses for conditional access

Workflow

# Example: IOC detection
import re

IOC_PATTERNS = {
    "ip": r"\b(?:\d{1,3}\.){3}\d{1,3}\b",
    "domain": r"\b[a-z0-9-]+\.[a-z]{2,}\b",
    "hash_md5": r"\b[a-f0-9]{32}\b",
    "hash_sha256": r"\b[a-f0-9]{64}\b",
}

def extract_iocs(text: str) -> dict:
     {k: re.findall(v, text)  k, v  IOC_PATTERNS.items()}