Device management: apps, work data separation and access decisions

Skills you'll practise

• Choose a separation model (fully managed, work profile or User Enrollment, app protection only) that fits device ownership
• Explain what app protection controls do and why they are paired with an access policy
• Deploy a required app or settings profile to a pilot group and check its status before widening
• Trace how a compliance result becomes an access decision and where the user fixes it
• Explain what a selective wipe removes, what it leaves, and when it takes effect

Course outline

1. 1.Apps, work data and access on mobile devicesVideo · 3 min
2. 2.Separating work and personalLesson · 15 min
3. 3.Apps, profiles and keeping data in managed appsLesson · 15 min
4. 4.Compliance, access and selective wipeLesson · 15 min
5. 5.Device management: apps, work data separation and access decisions: knowledge checkKnowledge check · 18 questions
6. 6.Final exam6 questions · passing it completes the course, so people who already know the material can test out

Sources it draws on

The lessons and questions are written from these references, so learners can go back to the original.

• NIST SP 800-124 Rev. 2: Guidelines for Managing the Security of Mobile Devices in the Enterprise (2023)
• Apple Platform Deployment: Intro to User Enrollment (account-driven User Enrollment for BYOD)
• Android Enterprise Help: Work Profile (separating work and personal apps and data)
• Microsoft Learn: App protection policies overview (Intune)
• Microsoft Learn: Remove company data from Intune-managed apps (app selective wipe)