Critical Capabilities for Mobile Device Management

This research provides quantitative ratings for a selection of enterprise mobile device management (MDM) offerings, evaluating them in typical use cases, across 10 critical capabilities. Enterprises should use these critical capabilities, use cases and product ratings to identify the most suitable enterprise MDM products or services to meet their management and security requirements.

Key Findings

• Not all MDM platforms provide device encryption if it is not supported natively on the device.
• Although containerized approaches offer some of the highest security, restrictions to the user's experience with mobile email may limit the user's acceptability and viability on personal devices.
• AirWatch, BoxTone, Fiberlink, MobileIron, Sybase and Zenprise use native Apple iOS 4 management APIs to implement functions such as over-the-air (OTA) software upgrades and certificate-based authentication.
• Good for Enterprise is a mobility suite centered on wireless email; many management and security capabilities are available within their email client only.

Recommendations

• Choose MDM offerings that support a lightweight management approach, with mobile agents and server-side platforms, when your security and management requirements are limited and deep control is not accepted by employees using personal devices. Examples include Zenprise, MobileIron, BoxTone, Fiberlink and AirWatch.
• Choose MDM offerings that support a heavyweight approach to deliver secure and manageable corporate email to consumer and personal devices when strict security and compliance requirements apply. Containers can enforce stronger separation among personal and corporate content. Examples include Good Technology, Excitor and Sybase.
• The iPhone 3GS and later hardware platforms ship with always-on hardware encryption. When iOS 4.2 was introduced, it added a new data protection class that allows third-party applications to manage their own encryption keys, reducing the risk of data leakage on a jailbroken device. The new data protection classes are activated upon the full installation of iOS 4 or later.

This document was revised on 24 August 2011. For more information, see the Corrections page on gartner.com.

Before making any effort to select the most appropriate tool for MDM, organizations need to understand their requirements and define clear policies for deployment, including corporate data and application protection on the device and back-end servers; isolation from personal content, if needed; and cost containment. Organization should evaluate different MDM offerings, focusing on the critical capabilities identified in this research.

Introduction

The proliferation of consumer devices and a growing demand from employees are changing the ways in which organizations deliver mobility solutions to the workforce.

IT organizations are forced to create mobility programs to support corporate email and other applications on consumer products, such as iPhone, iPad and Android devices. "Bring your own device" and employee-liable programs are common, and we expect that 80% of organizations will have tablets by 2013 (see "Gartner's Top Predictions for IT Organizations and Users, 2011 and Beyond: IT's Growing Transparency").

These deployments bring a range of new challenges, from security, compliance and management, to cost and human capital management. Organizations address these challenges by defining policies that regulate the usage of consumer and personal mobility for employees, and they need the appropriate tools to enforce policies, regulate behaviors, contain costs and manage risks, across multiple device platforms.

Multiple options are available — the enterprise MDM market has more than 60 players with a wide range of products, services and capabilities. Gartner research (see "Magic Quadrant for Mobile Device Management Software") identifies a subset of 23 vendors that qualify as viable for investments. These offerings are progressively adding similar features, driven by fierce competition, and the market is going through a commoditization route.

IT organizations struggle to identify the right options for investment. On one hand, the rapid evolution of mobile devices and business requirements makes it difficult to identify a clear set of MDM requirements. On the other hand, the lack of differentiation confuses buyers and complicates investment decisions.

One major area of differentiation among MDM offerings is the technical approach to management (see "How to Support Corporate E-Mail and Other Applications on Personal Devices"):

• Lightweight approach: Server-side product or service offerings may have a small mobile agent running on the device, and/or call native APIs provided by the mobile OS platform (e.g., iOS 4), but do not have a complete mobile management client. They can enforce policies on the server side, but cannot control the device and mobile user behavior in depth. They are used in combination with native mobile support in corporate email servers (e.g., Microsoft Exchange ActiveSync [EAS] in Microsoft Exchange Server or Notes Traveler in Lotus Notes/Domino) to enforce complementary policies to those provided by the server. Thus, they can preserve the native email client experience on iPhones and iPads, which are favorite choices for users. Relevant vendors with this approach include AirWatch, BoxTone Fiberlink, MobileIron and Zenprise.
• Heavyweight approach: Client-side management software is available for every relevant mobile OS platform (either stand-alone or blended with a proprietary email client). The management client can enforce strong IT control on the device (e.g., local data encryption, selective wipe and containerization). Vendors with this approach are Good Technology, Excitor and Sybase. Good's product does not integrate with the email server's native mobile support (e.g., EAS) — actually, it replaces it, and it does not work with the device's native email client, but requires its own client, which can only connect to a corporate email server. Good Technology's approach prioritizes on IT control, limiting the user's choice and experience with the email client.

Another important element of differentiation among these offerings is the delivery model: cloud services versus on-premises versus host. While most mature products (such as those from Good Technology, Sybase and MobileIron) are on-premises, a growing range of cloud services offerings (such as those from AirWatch, Fiberlink and Tangoe) are starting to appeal to users because they are more economical. In fact, there are no upfront costs, and an inexpensive price per user per month and more flexibility to scale up services with growing mobility adoption or needs.

Before entering MDM product selection analysis, organizations need to identify the risks and benefits of introducing support for corporate applications on personal devices. They then need to identify the IT policies required to control deployments, manage risks and support users. Finally, they need to choose the appropriate management approach and the products and services that can help to enforce those policies in a cost-effective way.

Product Class Definition

Gartner defines MDM as a range of products and services that enables organizations to deploy and support corporate applications to mobile devices, such as smartphones and tablets, possibly for personal use — enforcing policies and maintaining the desired level of IT control across multiple platforms. Areas of functionalities include security, provisioning, software and inventory management, and decommissioning. See "Magic Quadrant for Mobile Device Management Software" for a complete description of the market and vendors that deliver these products or services. In this research, we focus on the capabilities and viability of a subset of offerings (products or services) from this market, which get the most attention and inquiries for advice from our client base.

Critical Capabilities Definition

MDM offerings address a range of requirements from IT organizations aiming to deliver mobility experiences to their workforces or customers, while maintaining control and minimizing risks. They tend to bring a fairly complex set of functionalities, with progressively little differentiation among the competition. This research examines 10 critical capabilities that differentiate competing MDM products. The critical capabilities considered for enterprise MDM products are:

• Device Diversity
• Policy Enforcement
• Security and Compliance
• Containerization
• Inventory Management
• Software Distribution
• Administration and Reporting
• IT Service Management
• Network Service Management
• Delivery Model

Detailed information about each critical capabilities follows:

• Device Diversity: the degree of diversity in mobile devices and mobile OS platforms that the considered MDM product can handle. This includes:
  • Support one or more OS platforms, such as Android, iOS, etc. (Note that support for Research In Motion [RIM] OS and Windows Phone 7 is rated as a plus because fewer vendors have added them.)
  • Support for media tablets
  • Support for ruggedized devices
  • Support for simpler phones
• Policy Enforcement:
  • Enforce policies on eligible devices:
    • Detect OS platforms and versions, installed applications, and manipulated data.
    • Detect iOS jail-broken devices and rooted Android devices.
    • Filter (restrict) access from noncompliant devices to corporate servers (e.g., email).
  • Enforce application policies:
    • Restrict downloadable applications through whitelists and blacklists.
    • Monitor access to app stores and application downloads, and put prohibited applications on quarantine and/or send alerts to IT/managers/users about policy violations.
    • Monitor access to Web services, social networks and app stores, and send alerts to IT/managers/users about policy violations and/or cut off access.
  • Enforce mobile communications expense policies:
    • Monitor roaming usage.
    • Detect policy violations (e.g., international roaming) and, if needed, take action (e.g., disabling access to servers and/or send alerts to IT/managers/users about policy violations).
  • Enforce separation of personal versus corporate content:
    • Manage corporate apps on personal devices, and personal apps on corporate devices.
    • Tag content as personal or corporate through flags.
    • Detect violations of separation and, if needed, send alerts to IT/managers/users.
    • If a container is in use, prohibit exporting data outside the container (e.g., when opening an email attachment), and regulate interaction between different enterprise containers.
  • Restrict or prohibit access to corporate servers (e.g., to email server or email account) in case of policy violation.
• Security and Compliance: a set of mechanisms to protect corporate data on a device, corporate back-end systems and preserve compliance with regulations:
  • Password enforcement (strong alphanumeric password)
  • Device lock (after a given number of minutes of inactivity)
  • Remote wipe, selective remote wipe (e.g., only corporate content); total remote wipe (hard wipe, data not recoverable after deletion)
  • Local data encryption (phone memory, external memory cards)
  • Certificate-based authentication (include device ID, OS version, phone number); certificate distribution
  • Monitoring device and data manipulation on device
  • Rogue app protection (e.g., application quarantine)
  • Firewall
  • Antivirus
  • Mobile VPN
  • Message archiving (SMS, IM, email, etc.) and retrieval; record historical event for audit trail and reporting
• Containerization: a set of mechanisms to separate corporate from private content (data, applications) on a device and apply a range of actions to control the corporate footprint, such as:
  • Local data encryption
  • On-the-fly decryption
  • Selective remote wipe
  • No data export to other containers (data leakage prevention)
  • Controlled communication among containers
  • Application containerization (beyond email)
  • Containerization based on virtualization technology (e.g., Open Kernal Labs [OK Labs] OKL4, VMware MVP, ARM TrustZone)
• Inventory Management: a set of mechanisms to provision, control and track devices connected to corporate applications and data:
  • Asset management and inventory
  • Device configuration and imaging
  • Device activation and deactivation
  • Provisioning (OTA):
    • Distribution (push)
    • Configuration (push):
      • Device configuration
      • iPhone profiles
  • Lockdown hardware features (e.g., enable/disable hardware, camera, removable media card, infrared [IR] port, Bluetooth, Wi-Fi)
  • Monitoring:
    • Performance
    • Battery Life
    • Memory
  • Lost-phone recovery
    • Locate and map
    • Restore and migrate
• Software Distribution: a set of mechanisms to distribute applications and software upgrades to mobile users OTA, avoiding tethering to a PC:
  • Application discovery (e.g., through private app stores)
  • Software updates, for applications or OSs
  • Patches/fixes
  • Backup/restore
  • Background synchronization
  • File distribution
• Administration and Reporting: capabilities for IT administrators to manage mobile deployments and users. This includes:
  • Single console
  • Web-based console
  • OTA provisioning
  • Role-based access
  • Group-based actions
  • Remote control (real-time or permission-based)
  • Enterprise platform integration (e.g., Exchange Active Sync; LDAP; BlackBerry Enterprise Server [BES]; certificate authority; trouble ticketing and help desk, such as Remedy; and network management, such as IBM Tivoli)
  • Business intelligence
  • Reporting
• IT Service Management: capabilities to grant mobile service levels to mobile users, such as:
  • Help desk
  • User support with levels
  • User self-service (administration, etc.)
  • End-to-end real-time monitoring
  • Troubleshooting
  • Alerting
• Network Service Management: specific capabilities to monitor and optimize mobility costs, such as:
  • Contract management
  • Expense management
  • Service usage management
• Delivery Model: ways to deliver MDM capabilities to customers (e.g., on-premises, hosted, cloud). Complete cloud offerings are rated higher, because they allow organizations to acquire MDM capabilities without upfront investments. Pricing policies per users (as opposed to per device) are rated higher.

Use Cases

We have identified a number of use cases that come up fairly frequently in our client inquiries, and that help to highlight the best characteristics of selected MDM offerings under specific conditions:

• Case A1 — Highly regulated organizations focusing on corporate email only:
  • Organizations aiming to support consumer personally owned devices, such as iPhone, iPad and Android devices
  • Organizations operating in sectors under severe regulatory constraints (e.g., financial, healthcare, military and defense) with strict security and compliance requirements, such as the Health Insurance Portability and Accountability Act (HIPAA; e.g., must enforce local data encryption on all devices connected to their email servers, required certifications, etc.)
  • Organizations focusing on the short term, only regarding corporate email support
• Case A2 — Highly regulated organizations going beyond email:
  • Highly regulated organizations, as per Case A1, that want to deploy and support corporate applications beyond email, need to distribute software OTA, and need discovery mechanisms (such as for app stores, to block access, etc.)
• Case B — Nonregulated organizations, mobility deployments:
  • Organizations operating in nonregulated sectors (e.g., retail, delivery services) that can live with basic security and management support, and that must enforce limited mobile policies to mobile users
  • Organizations with previous mobility experience and/or mobility skills
  • Support for consumer devices, such as iPhone, iPad, Android, BlackBerry devices; corporate or personal devices
  • Organizations focusing on email and/or other applications
• Case C — Expense management focus:
  • Organizations that want to optimize mobility deployment expenses and that are less focused on security
  • Cost optimization
• Case D — Service-level management:
  • Organizations with critical mobile applications or users, and mobile service-level agreements
  • All types of deployment sizes (most often midsize to large)
  • Need to monitor and control end-to-end mobile deployments
  • Troubleshooting

Table 1 looks at the weightings of all the use cases in this research. Each use case weighs the capabilities individually based on the needs of that case, which impacts the score. Each vendor may have a different position based on its capability and the weighting for each one. The overall use case is the general scoring for the vendor's product, with all weights being equal.

Source: Gartner (July 2011)

Inclusion Criteria

Products covered in this research come from vendors included in "Magic Quadrant for Mobile Device Management Software"; refer to it for a complete description of the market and vendors. The following criteria were used to qualify vendors for inclusion in the Magic Quadrant for MDM:

• Support for enterprise-class (noncarrier), multiplatform support MDM: software or software as a service (SaaS), with an emphasis on mobility
• Specific MDM product focus and feature set, or a primary focus on MDM in another product set (messaging or security)
• Security management, with at least these features:
  • Enforced password
  • Device wipe
  • Remote lock
  • Audit trail/logging
  • "Jailbreak" detection
• At least mobile OS 3 platforms supported
• Policy/compliance management
• Software distribution, with at least these capabilities supported:
  • Application downloader
  • Application verification
  • Application update support
  • Application patch support
• Inventory management, with at least these capabilities supported:
  • External memory blocking
  • Configuration change history
• Managing at least 25,000 mobile lines
• Five referenceable accounts
• At least $1 million in MDM-specific revenue

Given the large number of players in this market and the complexity of the products, we have chosen to restrict this analysis to a subset of vendors whose offerings get the most interest and highest level of inquiries from Gartner's clients. This research focuses on products or services provided by AirWatch, BoxTone, Excitor, Fiberlink, FancyFon, Good Technology, Mobile Active Defense, McAfee, MobileIron,Sybase, Symantec, Tangoe and Zenprise. Vendors not included in this research are still valid options for consideration (see "Magic Quadrant for Mobile Device Management Software" for details), including: Capricode, Fixmo, IBELEM, Fromdistance, Motorola, Odyssey Software, Smith Micro Software, SOTI, The Institution and Ubitexx (acquired by RIM).

While most vendors specialize in management for smartphones and tablets, a subset provides specific capabilities to manage fleets of ruggedized devices (on Windows CE or Windows Mobile), including SOTI, Odyssey Software and Motorola. We do not consider these vendors in a separate use case because specialized management tools for ruggedized devices generate limited Gartner client inquiries.

Critical Capabilities Rating

Each of the products that meet our inclusion criteria has been evaluated on the critical capabilities, on a scale of 1.0 to 5.0. To determine an overall score for each product in the use cases, the ratings in Figure 1 are multiplied by the weightings in Table 1. These scores are shown in Figure 2. Figure 3 shows the product score in the various use cases, and also provides our assessment of the viability of each product.

Source: Gartner (July 2011)

Source: Gartner (July 2011)

Product viability is distinct from the critical capability scores for each product. It is our assessment of the vendor's strategy and the vendor's ability to enhance and support a product throughout its expected life cycle; it is not an evaluation of the vendor as a whole. Four major areas are considered: strategy, support, execution and investment. Strategy includes how a vendor's strategy for a particular product fits in relation to the vendor's other product lines, its market direction and its business overall. Support includes the quality of technical and account support, as well as customer experiences with that product. Execution considers a vendor's structure and processes for sales, marketing, pricing and deal management. Investment considers the vendor's financial health and the likelihood of the individual business unit responsible for a product to continue investing in it. Each product is rated on a five-point scale from poor to outstanding for each of these areas, and it is then assigned an overall product viability rating.

Source: Gartner (July 2011)

Figure 4 represents the overall general use for MDM with all ratings equally weighed. This segments the vendors into three positions based on their product capabilities alone: Zenprise, Mobile Active Defense and MobileIron at the top; Good Technology, Symantec and McAfee at the bottom; and the bulk of the other vendors rated in the middle. Unlike the MDM Magic Quadrant, which rates companies in a broader context than by product alone, the MDM Critical Capabilities methodology solely assesses companies based on their products.

The weighted capabilities scores for all use cases are displayed as components of the overall score.

Source: Gartner (July 2011)

Figure 5 shows the vendors' product scores for Use Case A1.

The weighted capabilities scores for all use cases are displayed as components of the overall score.

Source: Gartner (July 2011)

Figure 6 shows the vendors' product scores for Use Case A2.

The weighted capabilities scores for all use cases are displayed as components of the overall score.

Source: Gartner (July 2011)

Figure 7 shows the vendors' product scores for Use Case B.

The weighted capabilities scores for all use cases are displayed as components of the overall score.

Source: Gartner (July 2011)

Figure 8 shows the vendors' product scores for Use Case C.

The weighted capabilities scores for all use cases are displayed as components of the overall score.

Source: Gartner (July 2011)

Figure 9 shows the vendors' product scores for Use Case D.

The weighted capabilities scores for all use cases are displayed as components of the overall score.

Source: Gartner (July 2011)

Vendors

AirWatch

AirWatch's Enterprise MDM offering puts emphasis on device security, life cycle management, application distribution and help desk controls. It supports a broad range of device platforms and integrates with enterprise platforms, such as LDAP, Active Directory, Microsoft Exchange Server, IBM Lotus Notes/Domino and IMAP-based email servers. It integrates with cloud-based email services, such as Gmail, Microsoft BPOS and Office 365. AirWatch's origins come from the wireless network management services and ruggedized device market. The vendor has found equal success providing MDM through either a cloud-based or on-premises distribution model (see Table 2).

Source: Gartner (July 2011)

BoxTone

BoxTone's offering focuses on mobile service-level management and includes three modules: MDM, mobile support management and mobile operation management. It provides deep integration with enterprise mobility software platforms and many popular system management and monitoring platforms (e.g., BES, EAS and Good Technology). BoxTone supports BlackBerry, iOS, Android, Windows Mobile, webOS, and Windows Phone 7. Beyond MDM, BoxTone supports service desk management, incident management, problem management and application performance management (see Table 3).

Source: Gartner (July 2011)

Excitor

Excitor's DME Mobile Device Manager focuses on MDM and security. It does not rely on Exchange Active Sync policies to manage devices, but instead implements its own policies within their mobile management client. It supports standards such as OMA DM. Simple containerization is supported, but only in combination with Excitor's DME email product (see Table 4).

Source: Gartner (July 2011)

FancyFon

FancyFon's Mobility Center (FAMOC) is a centralized platform to manage the mobile device life cycle, from OTA provisioning to configuration, application updates, security and troubleshooting. It provides remote support for a range of mobile devices, either as a hosted or an on-site solution. FAMOC supports iPad, Android tablets and RIM Playbook through a dedicated media tablet application available in respective app stores. It also supports ruggedized devices and not typical mobile devices (e.g., GPSs) through Windows CE and Windows Mobile support, and Java-based feature phones with basic management, such as backup/restore, remote configuration and security (see Table 5).

Source: Gartner (July 2011)

Fiberlink

Fiberlink's MaaS360 Platform is a pure MDM cloud services offering, for organizations aiming to support both corporate and personal devices. It's a multitenant platform (see Table 6). Existing embedded platforms (BES, EAS and IBM Lotus Notes Traveler) are included in MaaS360 management via a single "cloud extender" agent that is deployed in the LAN. If device-side APIs are available, then device support beyond BES and EAS is done via API (e.g., Apple MDM protocol). If no device-side MDM API is present, then there is a native agent for that platform (e.g., Android).

Source: Gartner (July 2011)

Good Technology

Good for Enterprise is a mobility suite that supports mobile collaboration with strong support for security and management (see Table 7). The main components of the suite include: Good Mobile Control, for MDM; Good Mobile Access, for secure access to corporate data; Good Mobile Messaging, for secure wireless email (see "Critical Capabilities for Enterprise Wireless E-Mail Software"; this document has been archived, and some of its content may not reflect current conditions). Good Technology's MDM and security capabilities are sold as part of the entire mobility suite (i.e., not sold as individual products) and require the adoption of Good Mobile Messaging product for wireless email, including Good's email client. It replaces the email server's native mobile support. Through its native email client, it enforces separation between corporate and personal data; however, many MDM capabilities are available in the email client only. Good Technology provides the strongest implementation of containerization for the email client, on iOS, Android and Symbian devices. It also supports data leakage prevention (e.g., prohibiting the saving of email attachments outside the container).

Source: Gartner (July 2011)

McAfee

McAfee is a prominent global security player with strong positions in desktop and laptop antivirus, encryption, and comprehensive endpoint management. McAfee has entered MDM through the 2010 acquisition of Trust Digital. It combines its Enterprise Mobility Management (EMM) platform with security support, and its virus/malware protection software (via the McAfee ePolicy Orchestrator [ePO] console) with other McAfee products (see Table 8).

Source: Gartner (July 2011)

Mobile Active Defense

Mobile Active Defense's Mobile Enterprise Compliance and Security (MECS) provides mobile security and compliance cloud-based services for organizations to support corporate email and other applications on consumer and personal devices, enforcing security and compliance policies. It can integrate with e-mail servers and/or cloud services (including personal accounts). MECS is a clientless, zero-footprint product available on-premises, or as hosted or cloud services. E-mail is delivered through the device's native e-mail client through a secure VPN connection with encrypted data transmission. The mobile security server supports anti-spam and content filtering, controlling any messages that are being synchronized on the devices. It enforces security policies on a personal device connecting to corporate email, preserving regulatory compliance (e.g., with ISO 27001 or HIPAA). Mobile Active Defense extends controls beyond email by forcing all traffic over the VPN from applications to the browser — including content filtering, geolocation-based firewall rules, application inspection and remediation, and jailbreak remediation. It is also used in combination with hosted virtual desktop infrastructure (e.g., Citrix Receiver) to provide a secure VPN connection from iPads into the corporate application servers (see Table 9).

Source: Gartner (July 2011)

MobileIron

MobileIron launched its product in September 2009, and has seen very quick growth in sales, mind share and market share, outselling most MDM platforms in the past year. Built from the ground up, it is solely focused on mobility management, incorporating the Virtual Smartphone Platform (VSP) architecture to support security, data visibility, application management and access control. It does not provide encryption or VPN capabilities outside of what is provided on the device. MobileIron was one of the first vendors to combine MDM with network service management (see Table 10).

Source: Gartner (July 2011)

Sybase

Afaria is Sybase's MDM and security product, also delivered as cloud services within Sybase Managed Mobility (or as hosted services through partners such as Verizon and Orange). Sybase does not require a proprietary email client, but instead offers integrated secure control over a third-party email solution (for Android, via partner NitroDesk). Afaria provides rich support for software distribution, policy enforcement, inventory management and security. It is one of the oldest MDM products (see Table 11).

Source: Gartner (July 2011)

Symantec

Symantec is a prominent global security player with strong positions in desktop and laptop antivirus, encryption, and comprehensive endpoint management. Symantec has offered MDM support in Altiris since 2004. Although Symantec has offered MDM for years, Gartner analysts have not seen evidence of competitive public visibility until recently, and cannot verify a significant presence through our client references. Symantec has successfully obtained all the pieces for a strong MDM platform, but its strong focus on security causes a diminution in understanding of the business and operational requirements for mobile device life cycle management. Symantec integrates its Mobile Endpoint 6.0 solution for security (anti-malware) with its Mobile Management 7.0 offering, which focuses on software, inventory and application management (see Table 12).

Source: Gartner (July 2011)

Tangoe

Tangoe is a fast-growing communications life cycle management company with TEM and MDM capabilities. Although the primary revenue source is through TEM, the vendor also has seen the adoption of its MDM platform (acquired from InterNoded) grow during the past 18 months. Tangoe has done a good job of integrating TEM and MDM, and offering MDM as a service, although its offering has not yet matured. The Tangoe Mobile Device Management platform focuses more on security compliance and policy management, versus adding encryption for the content or authentication for the device. Tangoe's MDM solution is typically sold in a bundle with TEM services, and is delivered in multiple ways: as SaaS or behind the firewall, hosted or as a managed service (see Table 13).

Source: Gartner (July 2011)

Zenprise

Zenprise's Mobile Manager is one of the more innovative platforms available, combining a strong mobile VPN solution with the use of location-based technologies. It has a clear interface and solid reporting capability. It is a small company focused on MDM. It recently acquired Sparus Software, a small, French security and MDM company, to better support mobile security and encryption (see Table 14).

Source: Gartner (July 2011)