Cybersecurity with Mobile Device Management (MDM) Course

Lesson 1 • Ownership Models and Use Cases

Distinguishes corporate-owned, BYOD, COPE, and CYOD deployment models. Clarifies how ownership affects MDM scope, user privacy, and legal boundaries.

Lesson 2 • Enterprise Risk and Compliance Basics

Introduces risk assessment frameworks and compliance obligations for mobile fleets. Students map threats to business impact, forming the basis for policy design.

Lesson 3 • Mobile Ecosystem Overview

Covers iOS, Android, and cross-platform architectures relevant to enterprise security. Connects hardware, OS, and app layers to downstream MDM policy decisions.

Lesson 1 • High Availability and Scalability

Addresses load balancing, redundancy, and database clustering for MDM infrastructure. Prepares students to design resilient platforms that support large device fleets.

Lesson 2 • MDM Platform Architecture

Breaks down MDM server, management console, and device agent components. Establishes the structural knowledge needed to configure and troubleshoot any MDM platform.

Lesson 3 • Enrolment Protocols and Methods

Covers zero-touch, QR, email, and certificate-based enrolment workflows. Correct enrolment is the gateway to all subsequent policy enforcement.

Lesson 4 • Device Communication and APIs

Explains MDM protocol commands, push notification channels, and REST API integration. Students understand how commands travel from server to device securely.

Lesson 1 • Configuration Profile Fundamentals

Introduces profile structure, payload types, and signing requirements for iOS and Android. Profiles are the primary mechanism for enforcing security baselines on enrolled devices.

Lesson 2 • Wi-Fi, VPN, and Network Profiles

Configures secure network access profiles including enterprise Wi-Fi and always-on VPN. Ensures devices connect only through approved, encrypted network paths.

Lesson 3 • Device Restriction Profiles

Applies hardware and software restrictions such as camera disable, app install limits, and screen capture blocks. Directly reduces the attack surface on managed devices.

Lesson 4 • Profile Lifecycle Management

Covers profile versioning, update deployment, conflict resolution, and removal workflows. Maintains configuration integrity as organisational requirements evolve.

Lesson 1 • OS Update and Patch Enforcement

Manages OS version requirements and enforces timely patch deployment across the fleet. Unpatched devices are a primary vector for known-vulnerability exploitation.

Lesson 2 • Device Encryption Standards

Enforces full-disk and file-based encryption on iOS and Android devices. Encryption protects data at rest against physical theft and unauthorised forensic access.

Lesson 3 • Compliance Rules and Automated Actions

Builds compliance rule sets that trigger automated responses such as quarantine or wipe. Automated enforcement reduces response time and removes human error from remediation.

Lesson 4 • Jailbreak and Root Detection

Implements detection mechanisms for jailbroken iOS and rooted Android devices. Compromised OS integrity invalidates all other security controls and must trigger immediate action.

Lesson 1 • App Lifecycle and Retirement

Manages app updates, forced upgrades, and selective wipe of managed app data. Ensures outdated or compromised apps are removed without affecting personal data.

Lesson 2 • Managed App Configuration

Uses managed app config keys to pre-configure enterprise apps without user input. Reduces onboarding friction and enforces consistent app security settings at scale.

Lesson 3 • App Wrapping and SDK Integration

Applies MAM policies to third-party apps via wrapping or SDK without full MDM enrolment. Enables BYOD data protection without requiring device-level management.

Lesson 4 • Mobile Application DLP Controls

Enforces data loss prevention by restricting copy-paste, document sharing, and cloud backup within managed apps. Prevents corporate data from leaking to personal app containers.

Lesson 1 • Zero Trust Network Access for Mobile

Implements ZTNA principles by replacing VPN with identity-aware, per-session access brokers. Reduces lateral movement risk by granting access only to specific resources.

Lesson 2 • Conditional Access Policies

Configures access rules that evaluate device compliance, user role, and location before granting resource access. Ties MDM compliance state directly to application authorisation.

Lesson 3 • Certificate-Based Device Identity

Issues and manages device certificates via SCEP and NDES for strong authentication. Device certificates replace passwords and enable mutual TLS for enterprise resources.

Lesson 4 • Privileged Access on Mobile Devices

Controls elevated access for administrators and executives using mobile PAM integration. Limits blast radius of compromised high-privilege mobile accounts.

Lesson 1 • Containment and Remote Actions

Executes remote lock, quarantine, and selective or full wipe actions through MDM. Rapid containment prevents data exfiltration from compromised or lost devices.

Lesson 2 • Mobile Incident Detection

Identifies indicators of compromise on mobile devices using MDM telemetry and SIEM integration. Early detection limits dwell time and reduces breach impact.

Lesson 3 • Breach Notification and Stakeholder Communication

Manages internal escalation, regulatory notification timelines, and user communication after a mobile breach. Timely, accurate communication limits legal and reputational exposure.

Lesson 4 • Post-Incident Recovery and Hardening

Restores devices to a known-good state and applies lessons learned to strengthen MDM policies. Recovery procedures minimise downtime while preventing recurrence.

Lesson 1 • Continuous Improvement and Roadmap Planning

Establishes feedback loops, threat intelligence inputs, and roadmap processes for MDM evolution. Keeps the mobile security programme ahead of emerging threats and technology changes.

Lesson 2 • MDM Governance Framework Design

Builds policy hierarchies, ownership models, and change management processes for MDM programmes. Governance ensures consistent enforcement and clear accountability across the organisation.

Lesson 3 • MDM Platform Evaluation and Migration

Applies structured criteria to evaluate, select, and migrate between MDM platforms. Minimises enrolment disruption and policy gaps during platform transitions.

Lesson 4 • Audit Readiness and Evidence Collection

Prepares MDM documentation, log exports, and compliance evidence for internal and external audits. Proactive audit readiness reduces findings and accelerates certification processes.