The National Institute for Standards and Technology has released draft guidelines for government agencies to manage their mobile applications and identify associated risks, InformationWeek reported Thursday.
Richard Walker writes the document outlines vetting systems to detect security vulnerabilities of third-party mobile apps before implementing them across the enterprise.
“Agencies need to know what a mobile app really does and to be aware of its potential privacy and security impact so they can mitigate any potential risks,” Tony Karygiannis, a computer scientist at NIST’s computer security division, told the publication.
NIST seeks public comments on the draft guidelines until September 18, according to the report.
The agency has also called on agencies to develop tools and methods for examining mobile app test results, informing agency stakeholders about the vetting systems and testing all software updates, Walker reports.