The growing popularity of Apple devices is related to the general perception of them as being more secure, among other things. As many as 77% of organizations believe that Macs are more secure compared to other platforms. However, iOS and macOS devices are becoming the top choice of not only users as a whole, but also cybercriminals. According to a study conducted by Atlas VPN in 2020, 674,273 new threats were detected!

Fortunately, a year later there were 2474 fewer attacks recorded, albeit this does not mean that the problem should be ignored. Malwarebytes reports that in 2020, 111 million malware attacks were detected on the Windows platform, while on Macs there were just over 1.1 million incidents of this type. Although there is comparatively less malware that attacks Apple devices than the Windows platform, it is impossible to ignore the fact that Mac and iPhone users can also become the victims of cyberattacks.

Does a Mac need an antivirus application?

In terms of device protection, Apple has equipped each of its Macs with XProtect, Gatekeeper, and MRT, among others.

• XProtect – built-in malware protection. After opening the downloaded application, it checks to see if it matches any of the malware definitions in the database. If so, you’ll see a warning message that running the file will damage your computer and information about which malware definition it fits into.
• Gatekeeper – a security feature that verifies whether the app you’re running comes from a trusted source – whether it’s been verified and downloaded from the AppStore or is Mac approved. If the application is found to be untrusted, an alert will be displayed (however, this does not necessarily mean the software is malicious).
• Malware Removal Tool (MRT) – a tool for detecting and removing malware based on an automatically updated Apple database.

The above tools are a solid basis for building a safe work environment. However, as the above data regarding attacks on Apple devices shows, they may be insufficient to protect users’ privacy and the company’s network data.

What is ransomware and what other types of malware can you find on Macs?

Ransomware

Ransomware attacks are one type of cyber-attack that has been a common topic of discussion in recent years. Their goal is to extort large amounts of money. In 2021, an attempt was made to extort $50 million from Apple in exchange for the stolen schematics of new devices.

Ransomware is a type of malware that gradually encrypts data on your computer, cutting off access to files. To decrypt the data, you need a code that can be purchased from hackers.

Spyware

The purpose of Spyware is to obtain sensitive data. Various information is collected, such as daily computer activity, browsing history, saved data and passwords, or even webcam images. This group of malware also includes Keyloggers software that monitors key sequences and sends them to the attacker’s server.

Cryptojacker

With malware of this type, the attacker gains access to computer resources such as the memory and processor, which he then uses to perform complex calculations and solve mathematical problems, colloquially called “cryptocurrency mining”. A great deal of electricity is used, exerting a heavy load on the devices, which in turn generates huge costs for the owner.

Trojan

This is a kind of malicious code hidden in the installation file of a seemingly legit application. Trojan programs are used by hackers for all kinds of activities, from copying files to DDOS attacks.

Botnet

The botnet software turns the devices into remotely controlled machines for sending spam. With the help of botnets, disinformation campaigns are carried out, and even attempts to influence politics are made. Botnet devices can create millions of networks that remain dormant until activation.

Worm

A worm is a type of malware that uses a device’s resources to replicate and spread across the network. For some time, this process is invisible to the user, but it becomes visible when the replication processes consume a significant part of the system’s resources and affect the speed of operation. In addition to replication, worms can also destroy files, distribute spam, or act as a backdoor or a Trojan.

Rootkit

A rootkit is a collection of tools designed to give unauthorized access to a computer’s root account. Accessing the root of the system requires sophisticated techniques, but once accessed, hackers are able to install any software, manage operating system files, or gain access to selected data.

Backdoor

A backdoor is a vulnerability in a piece of code that allows unauthorized access to a system. It is not a type of malware, but it is dangerous. Backdoors are often used by hackers to access data or put files on a computer or mobile device. In spite of appearances, these are common, even in iOS or macOS. Backdoor information is often spread by ethical “white hat” hackers, who warn the software provider and give them time to repair errors before they make information about the error public.

Expert knowledge | Technologies

Read the article and find out more about update management solutions. Get to know the solution for the full functionality and security of Apple devices? Read the text!

What is the best antivirus application for Macs?

Protecting users is a basic requirement for any organization. Unfortunately, choosing the right tool, especially on a Mac, is quite a challenge, because apart from safety-related aspects, it is also necessary to pay attention to user convenience.

The most important features that good antivirus applications have are:

• scanning and monitoring functions,
• minimal impact on the functioning of the system, imperceptible to the user,
• additional protection of identity and confidential data,
• frequent and automatic updates.

Mac antivirus designed for Apple device users

The Apple platform is considered one of the safest environments to work in. However, it is not 100% indefectible, and cybercriminals are constantly developing new and increasingly sneaky ways to break through macOS security. In response, Jamf Protect software was created to preserve the Apple User Experience.

Jamf Protect protects the macOS platform from malware. It detects and helps remove Mac-specific threats, controls applications across your organization, and monitors endpoints for policy compliance.

Jamf Protect is based on the Endpoint Security Framework, Apple’s core approach to macOS security, and enhances it with better prevention, control, and monitoring tools. By aligning with the solution, the software supports the newest devices and OS releases, including Monterey Macs with the M1 family of processors.

Here are the most important capabilities that Jamf Protect offers administrators:

• Monitoring and alerts on any undesirable activities,
• Event export to SIEM (Security Information and Event Management) systems,
• Proactive blocking of known malicious applications and other programs from unknown sources,
• Cutting off the device from the company’s critical sources,
• Reporting on malicious files deleted from the device (MRT),
• Scanning files downloaded from the Internet.

LEARN MORE | WHITE PAPER Apple for Business Apple Device Management Services Download your copy

Jamf Protect – the most important advantages

• Easy and quick implementation,
• Zero-day support for new operating systems,
• Integration with the Jamf Pro system,
• Solid lite software that does not burden the operating system and takes care of battery life,
• Minimal end-user involvement,
• The option to use it with various MDM-class solutions.

Who is Jamf Protect for?

The market share of Mac devices is growing, and so is the demand for dedicated solutions that will provide companies with the highest security standards, including the CIS Benchmark certification. CIS sets best practices for organizations and device configuration standards, and Jamf Protect ensures them and verifies whether the device meets them.

Jamf Protect will work in any company in which infrastructure security is key. Efficiency of implementation and security are particularly important in the case of banks, Fin-Tech organizations or startups. For the financial sector, cybersecurity is a strategic area, which is why companies in the industry are increasingly investing in the development of solutions ensuring continuity and network security. Companies from the financial industry that use Mac devices should consider using dedicated solutions such as Jamf Protect.

Device security monitoring can also be based on defined CIS Benchmarks, and any difference from the basic configuration will be immediately reported to the administrator.

Ensure the security of your remote employees’ corporate Macs

For many people, the home office means comfort and security. Employees feel safe at home and can access Internet resources that they would not have access to on company Wi-Fi networks. This means that all that is needed for malware or adware to appear on your machine is for you to check your private email or let your child play on a website. For IT administrators, remote work is not synonymous with security – quite the opposite. For security teams, it is an additional challenge to detect the threat as soon as possible.

The most important protection functions of Jamf Protect

Threat Intelligence

Jamf Protect security software has an extensive database that includes comprehensive know-how on malware. Based on this, the software acts as an antivirus program for Mac computers by preventing the launch of applications of unknown origin, known malware, Trojans, adware, ransomware, as well as potentially unwanted programs (PUP). Jamf Protect can block unwanted software and restrict its functioning by configuring restrictions based on various factors. A threat that has been detected can also be quarantined for later analysis.

Threat Hunting

Jamf’s application provides access to information about the status and activity of the Mac fleet with minimal impact on the end user. Alerts inform the administrator when the device settings differ from the configuration securing the operating system. The system allows the administrator to define its own analytics, which allows them to detect environment-specific threats. For example, a Jamf Protect administrator can create analytics that will detect the use of the “sudo” command (it is used to run applications reserved for an administrator called “a root”).

Behavioral analysis

Detecting known malware is one thing. However, when it comes to finding new attacks, identifying malicious users or suspicious processes, the issue becomes more difficult. Jamf Protect uses specially designed behavioral analysis to identify malicious and suspicious behavior on Mac devices. It makes it easier to understand the context which the device found itself in at the time of the alarm and the logic leading to it. Thanks to this, the administrator can solve problems quickly and confidently.

MITRE ATT&CK for Mac

Analytical mechanisms designed for Jamf Protect are based on MITRE ATT&CK®, a globally available database of knowledge pertaining to cybercriminals’ tactics and techniques, based on real observations. Thanks to the use of information collected in the database, threat models dedicated to the Apple environment have been developed.

Standardized transmission of logs

Many industries are subject to additional legal regulations, including in the area of IT infrastructure. Examples are requirements to carry out compliance checks, audits of the processing of personal data and the storage of confidential information. Non-compliance can result in lawsuits, disciplinary actions and hefty fines. In order to comply with the regulations, it is necessary to ensure full supervision of Mac activities from a single central system. Jamf Protect transmits all Unified Log data from macOS captured by Compliance Reporter in real time, to a security information and event management solution (SIEM) or another data analysis tool.

API access

Thanks to the use of a modern application programming interface (API), Jamf Protect allows you to manage using a terminal, which makes it easier to work with very complex scripts. API access also enables revolutionary integration with many third-party security solutions, further enhancing the protection available for macOS computers.

Apple security and device management platform

Apple administrators eagerly use Jamf Pro to manage IT infrastructure.

Jamf products work together, combining the strengths of each program into a larger platform, known as Apple Enterprise Management (AEM). With AEM, Jamf Protect analysis can be configured to scan devices running obsolete applications and programs, providing an additional layer of protection. Thanks to the smooth integration with Jamf Pro, it is possible to track devices that do not have key updates. Then, thanks to the Jamf Pro policies, automatic device updates are enforced, which restores compliance with the defined standards.

What else is worth knowing about Jamf Protect? Frequently asked questions

Why is Jamf Protect the right choice for Macs?

Close integration between macOS and Jamf Protect ensures that users have the same seamless experience they’re used to with Apple. At the same time, the performance of the devices will still be optimal.

How long does it take to adapt Jamf Protect to newer versions of macOS?

In accordance with the philosophy that Jamf follows when creating all products, the provider is obliged to ensure support on the day when the new system version is released. Jamf Protect does not rely on KEXT (Kernel Extensions) which need to be recompiled or redeveloped every time macOS is updated. It is based on a modern solution recommended by Apple, the so-called System Extensions. This allows you to carry out updates in accordance with the schedule.

Jamf Protect detects known Mac malware. Can it also detect 0-day and other unknown threats?

With a team of security specialists and partners, Jamf is dedicated to detecting and testing issues related to the macOS operating system. This also includes working directly with Apple to remove unknown threats. Additionally, Jamf Protect has a behavioral analysis feature that evaluates the behavior of the application and alerts the IT department when something seems not to be working. Thanks to this, the team of administrators can immediately take action to investigate the case.

Does Jamf Protect secure devices stored in other third-party MDMs?

Of course. You can expect the same level of Jamf Protect performance, regardless of the MDM system used to manage your devices. However, by integrating with other Jamf products such as Jamf Pro, you can create extended workflows to quickly detect infections. In addition, thanks to cooperation between Apple and Jamf, it is possible to automatically remove the consequences of the infection.

Is Jamf Protect supported?

Yes, the support includes a dedicated team of customer service representatives, engineers and security staff focused on one goal: to help you get the most out of your Apple products.

How do I check if my Mac is infected?

When a security alert is raised, the first questions are often the same. What happened, to whom, when and where? All these basic information can be found in the Jamf Protect alert. When you start investigating whether a given alarm should really be a concern, you often start by getting more data from the device. Whether you need files, configuration settings or logs from your device, Jamf Protect and Jamf Pro can help you get the information you need, no matter where in the world your device is currently located.

How to remove the virus from a Mac?

Removing the effects of security incidents is the area where most interactions and sometimes even conflicts between security and IT departments occur. Security teams need information about the incident; they need to investigate the machine and even manipulate the files and settings on the computer. IT professionals often have to respond to end-user complaints when “weird things” start happening on their devices as a result of fixes being in progress. Jamf Protect and Jamf Pro allow you to respond to incidents manually or automatically using the tools IT professionals already use to manage Macs. End users, in turn, are no longer surprised by what happens on their devices, because the way of responding to incidents is adapted to the organizational standards they are already familiar with.

Which systems support the security of Apple devices in a company?

Cybersecurity is becoming increasingly important, and trends related to remote work only intensify the challenge.  This is particularly important in the case of industries for which data and infrastructure security are crucial, such as banking, finance and health care.

Our Apple administrators offer security management services, supporting clients in the implementation of suitable security policies and proven tools, such as Jamf Pro, Jamf Protect and Jamf Connect.

How to choose a dedicated solution for endpoint security?

Apple pays special attention to hardware security, which is why macOS and iOS devices have been regarded as the most resistant to cyber-attacks on the market for years now. Nonetheless, to start using these devices in mixed infrastructure, you need to apply additional security solutions to maintain control over the devices, especially in the context of increasingly important remote work.

In response, Jamf, the producer of the Jamf Pro system for Apple management, has broadened its offer to include additional solutions for comprehensive security management.

Jamf Protect: an application built for Mac device security

Jamf Protect is a system which allows you to improve the security of Apple devices used for business purposes. Jamf Protect prevents the system from installing macOS malware, detects and eliminate Mac-specific threats, and monitors endpoints for compatibility with Jamf Protect.

Jamf Connect Endpoint protection built for Mac to protect devices

Jamf Connect is a new approach to identity and security management.

Active Directory authentication is becoming increasingly challenging in the era of remote work and distributed teams. Jamf Connect addresses this challenge by providing flexibility in the central and remote management of users, groups, passwords, and access to corporate applications and cloud resources.

Jamf Protect and Jamf Connect – who is it for?

Jamf Protect and Jamf Connect respond to the growing demand for solutions supporting remote work and mobile employee access to company infrastructure, especially in key industries such as:

• Banking
• Finance
• IT
• Education
• Health care

as well as for every company where data and infrastructure security are crucial to business functioning.

Minimizing risk

The key information necessary to secure Mac computers is data about the state of devices and operating systems. Knowing what is running on a given device (and to what extent) is crucial. Thanks to this, the IT department is able to make quick decisions to administer remediation actions and mitigating workflows, thus ensuring compliance with corporate policies and/or regulations.

Individual remedies

No matter how much risk is minimized, sometimes a breach occurs and an untrusted device or even an untrusted user gets access to the environment. Blocking such a user or restoring the device to a trusted state can be difficult even for the most advanced security teams. However, many activities related to such incidents can be automated. In Jamf, there are plenty of opportunities to automate common remediation actions such as locking the device, deleting files, resetting settings, and even remotely redeploying macOS in a way that aligns with Apple’s existing fleet management.

Education of end-users

No top antivirus program will protect your device 100% from all threats, such as phishing – an attack that means the theft of one’s digital identity. User education is often considered to be the first and most important line of defense against cyber-attacks. After removing the threat, instead of information that the malware has been blocked on the device, you can schedule a series of actions that require user involvement. One option is to call up a dialog box with an instructional video, from which the user will learn how to use the device safely and what actions to avoid.

Summary

The infrastructure, including the devices, software and users, is unique to each organization. In the era of accelerated digital transformation, the key data for the functioning of the company are located in the infrastructure. Regardless of the platform used, it is necessary to take any countermeasures that will ensure smooth operation and high availability of resources. In the case of iOS and macOS devices, it is important to find tools that will allow you to get the most out of your devices, but also provide the right experience and meet user expectations. In this regard, Jamf Protect certainly extends the protection of Mac computers, making the infrastructure much more secure and fully controlled.

Services for on-premises and in-the-cloud update management

Our proprietary solution works in both a local environment and on cloud-based infrastructure.

Update monitoring and application testing

We perform compatibility testing of customer-specified applications, which are constantly monitored for updates and information pertaining to detected threats.

Creating update packages

We adjust the timing and scope of applications updates to the customer’s work schedule.

Preconfiguring the application

No manual configuration of the application by end users is required.

Distribution of updates

We ensure the fast and efficient distribution of application updates to end-devices.

Why work with our team of Apple administrators? 

Our team of Apple administrators is constantly developing their skills in macOS and iOS device management. Thanks to many years of experience, they provide world-class services, the quality of which are confirmed by the partner titles:

• Apple Consultant – we belong to the elite Apple Consultant Network community, as part of which we support companies in the scope of managing Apple devices,
• Jamf Gold Partner – confirmation of expertise and knowledge in the field of administration,
• Jamf Integrator – a guarantee of high-quality Jamf Pro deployment services for macOS and iOS environments.

Summary

We are a high-level partner both in terms of technical knowledge and professional cooperation. As a partner, we are responsive, always meet deadlines, and have provided solutions to problems with Apple device management and post-implementation support numerous times.  
Any company with infrastructure based on Apple can take advantage of our services.

Find out more: Jamf Pro – MDM software

Windows and macOS under one roof?

Implementing the Apple architecture in organizations which have used the Windows operating system since day one is a real dilemma which many of them face. The question is: when is the right time to take this revolutionary step? First, let’s take a look at the benefits associated with Apple architecture.

Why Poland

Why to outsource software development to Poland

• Skilled programmers
• Remarkable English proficiency among Polish developers
• Low hiring prices

Read the text to find out more!

Brand attractiveness

When organizations give employees the ability to choose the technology they will be working on, employees consistently choose Apple (72% of members choose Mac and 28% choose PC). Giving them the choice between Apple or Windows devices will improve your organization’s attractiveness in your employees’ eyes.

Fewer configuration requirements

Perhaps one of the substantial benefits associated with Apple architecture and the macOS operating system is that there are fewer configuration requirements compared to the PC environment and Windows operating system.

This is because Apple has a highly streamlined computer lineup that consists of MacBooks, iMacs, Mac mini and Mac Pro. In contrast, PC devices have different manufacturers and therefore multiple configuration requirements.

Supreme security

With PCs having a larger market share, most security attacks, such as ransomware or malware, are aimed at PC systems. Apple architecture incorporates stringent security protocols which manage access to and the usage of devices. This increases the security of your valuable data from unauthorized access and theft. But I will come back to this later.

Read also: Jamf Connect – identity management reimagined

Stable infrastructure

Unfortunately, PCs are susceptible to random crashes, as well as peculiar issues with devices caused by compatibility problems that may occur due to the abovementioned multiple hardware manufacturers and configurations. In the worst case scenario, it may even bring about financial losses. Apple devices are known for their impeccable performance and stability, which is an attribute any business would benefit from.

Industrial Applications of Apple Device Management

LEARN MORE | WHITE PAPER

Apple for Business

Apple Device Management Services Download your copy

Owing to the benefits associated with this architecture, different organizations across multiple industries — hospitals, schools and corporations, such as IBM — have embarked on revolutionizing their processes by fully adopting the Apple device management system, resulting in the streamlining of processes and the enhancement of efficiency. Some of the applications within different sectors include:

Field Services

Having a mobile workforce is central to enhanced productivity in field-based business operations. Remote device management makes it possible to distribute pre-configured apps to the mobile workforce.

Small and Retail Businesses

With security being a top concern, the implementation of the Apple device management system can be a wise move. The system offers a secure environment through data encryption and various security mechanisms. In cases of specific use, restrictions to access can be implemented using macOS security settings. Employees get to be empowered through centralized device management which gives them access to resources as they need them.

Jamf Pro: What It Is and its Benefits

Jamf Pro is a mobile device management system specifically designed for Apple devices. Most importantly, it can be integrated with Microsoft Intune or Microsoft System Center Configuration Manager (SCCM), making all Mac and PC devices fully compatible with each other.

The system itself enhances operational efficiency during a device’s lifecycle, making it possible for you to work more efficiently on task development. Some of the functions to be executed by the tool include the deployment and maintenance of applications, Usage Logs which show activities as conducted by users using the various devices, and also the distribution of settings to remote devices. In the event of any security threat, the system can assist with an immediate and appropriate response, therefore safeguarding your devices and data. The benefits of this system include:

• Flexibility. With Jamf Pro, you are in control of which applications to install on which devices. With Self–Service portal, you are at liberty to run maintenance checks whenever convenient.
• Reliability and time-saving. Most activities such as app updates can run as background processes. These actions are executed promptly with minimal involvement on your side.
• Confidentiality. Full audit logs are kept, showing every action conducted in the system. No data is transferred from your device, therefore the security of data is maintained.

Why Go for the Jamf Pro with JCommerce?

Implementing Apple technology at your company will definitely transform the way your employees work and how your business operations are conducted. Furthermore, the Apple device management solutions can support your organization when the devices which are in use are not being managed as required. Also, to avoid blackouts during unforeseen circumstances, you need to diversify in terms of operating systems in order to eliminate dependency — as I previously mentioned, thanks to Jamf Pro, macOS architecture is fully compatible with the Windows environment.

Summary

At JCommerce, we offer the Jamf Pro, putting state–of–the–art technology and management tools at your disposal. It is designed to simplify the usage of Apple devices for your employees, enabling you to provide a better user experience. We have a team of certified Jamf experts and Apple systems engineers ready to face any challenges.

Let us help your organization operate much more efficiently — contact us today for your Apple device management solution.

Challenges of the new reality

We experience the new reality when it comes to the organization of work. Remote work, distributed structure, no physical access to the IT department, to name but a few. Many companies are making remote work a part of the organizational standard. Working from home is not just an option anymore. It is becoming standard procedure. Twitter says: “Opening offices will be our decision; when and if our employees come back will be theirs”, and plans to allow their employees to continue working from home permanently if they so desire.

All of this creates new challenges we have to face, related to security and logging in to the network:

• How to easily provide employees with access to corporate resources and applications?
• How to ensure the security of documents and files?
• How to manage employees account and solve login-related issues?

Read also: The Key Leadership Skills You Need for The 21st Century Workplace

Jamf Connect login – a brand new authentication user experience

Jamf Connect provides you with the ability to use a single identity for access to devices and resources. A cloud-identity credential delivers a new user experience in terms of setup and everyday logins. Unified login credentials are in use across all devices and applications in the company.

It is much easier for the IT department to manage all the Macs in the organization remotely, and the Apple administrators gain a tool allowing them to maintain better control over user access. Identity management might be the easy part.

Unsecured networks and unauthorized users always give the IT security team sleepless nights. Thanks to the constant monitoring of all devices (where devices are being used and by whom) we can implement compliance standards across all devices and users.

CLIENT STORIES

Jamf Pro implementation for a global FinTech

  Find out how Inetum's specialists supported the project. Read the client's story!

Jamf Connect login – a brand new authentication user experience

Not only will your employees benefit from this identity management solution, but Jamf Connect will translate into specific advantages for your organization.

• Reduced number of password reset-related tickets
• Improved efficiency of employees who do not have to deal with IT issues and can focus on their tasks
• Administrators keep Mac devices and data secure
• There is no need to bind the device to the domain
• Easier account provisioning

Forever in sync

User passwords can be synchronized between the cloud-identity provider and the local Mac account. No need to waste time logging in or on getting access to applications over and over again. Not to mention password-related help desk requests, of which there are almost none. A forgotten password doesn’t cause bottlenecks anymore. According to Okta, a single password reset request costs companies an average of $70.

Also read:

• Jamf Pro MDM-class solution implementation

Jamf Connect Cloud Identity management – summary 

A solution that guarantees a reduction in both volumes of help desk tickets and factors which may get in the way of productivity is at your fingertips. Jamf Connect provides a hassle-free way to undertake identity management by remotely managing users, passwords and access to corporate resources and applications. No time or money is wasted.

Are you interested in apps that allow administrators to manage corporate devices? Our Apple administrators configure Jamf Connect and implement MDM-class solutions. Contact us to find out more!

For many people, the term ‘home office’ is synonymous with comfort and security. Employees feel safe at home and can make use of resources on the Internet that they would not have access to via the corporate network. This means that merely checking your private email or allowing your child to play online is enough for malicious software (malware or adware) to show up on your computer. For IT administrators, the home office is not synonymous with security – quite the opposite. For security teams, it is an additional challenge: detect the threat as soon as possible and react. It is widely accepted that Mac devices are secure, but cybercriminals never sleep, especially now that remote work has become standard.

Are Mac devices still safe?

Just a few years ago, Macs were a less common target for cybercriminals than devices running on the Windows operating system. However, the situation changed in 2019. According to the “State of Malware” report, the number of confirmed attacks on macOS devices was higher when compared to Windows for the first time ever, and increased by 400% compared to 2018. Mac devices fulfil the highest security standards, but it is worth remembering that every device is only as safe as the user allows it to be. For Macs, the built-in XProtect anti-virus program and the Malware Removal Tool successfully fight off malware attacks. However, users can still – whether consciously or not – let cybercriminals in by installing adware or PUPs.

For example, adware called NewTab was detected 30 million times on Mac devices last year. Apple is constantly updating XProtect with new definitions, and dedicated remote administration software further strengthens these mechanisms by reporting undesirable activities on an ongoing basis. Many enterprises use tools such as Jamf Pro to remotely manage the company’s infrastructure. Also in the field of cybersecurity, it is worth providing dedicated solutions that are an additional weapon for Apple administrators and security departments.

Jamf Protect… and you feel at home

A new solution from Jamf, which provides MDM (Mobile Device Management) solutions for Apple devices, comes in handy. Jamf Protect is based on solutions embedded in the macOS operating system, such as the Endpoint Security Framework, and allows you to analyze system events. The tool uses advanced telemetry and detection mechanisms, thanks to which it allows administrators to control the state of computers, regardless of where they are. Therefore, it also works well for remote employee device management. The potential of Jamf Protect is even greater because it allows IT administrators to design and implement their own methods of analyzing and triggering alerts for potentially dangerous events.

Jamf Protect – the possibilities

Apple administrators eagerly use Jamf Pro to manage IT infrastructure. Jamf Pro and Jamf Protect can detect danger and undertake non-contact repairing actions. Both tools integrate with each other, so there is no need to log in to Jamf Pro separately.

Here are the most important opportunities that Jamf Protect offers administrators:

• Real-time alerts about any undesired activities,
• Supervision of device activity,
• Event export to SIEM (Security Information and Event Management) systems,
• Proactive blocking of known malicious applications,
• Cutting off the device from the company’s critical sources,
• Reporting on malicious files deleted on the device (MRT),
• Inspection of files downloaded from the Internet.

Jamf Protect – the most important advantages

• Zero-day support for new operating systems,
• Integration with the Jamf Pro system,
• Lite software that does not load the operating system,
• Minimal end-user involvement,
• Possibility of using it together with various MDM solutions

Who is Jamf Protect for?

The market share of Mac devices is growing, and so is the demand for dedicated solutions that will provide companies with the highest security standards, including CIS Benchmark certification. CIS sets best practices for organizations and device configuration standards, and Jamf Protect protects them (verifies that the device meets them). Jamf Protect will work in any company where infrastructure security is key. Efficiency of implementation and security are particularly important in the case of banks, fintech organizations or startups. For the financial sector, cybersecurity is a strategic area, which is why companies in the industry are increasingly investing in the development of solutions ensuring continuity and network security. Companies from the financial industry that use Mac devices should consider using dedicated solutions such as Jamf Protect. Jamf Protect is the perfect solution for any company, regardless of the sector, which already uses MDM software (including software other than Jamf Pro).

How to start using Jamf Protect?

You can familiarize yourself with the capabilities of the Jamf Protect system by contacting Inetum, which is currently the only solution provider in Central and Eastern Europe and the Middle East, and which also has a team of Jamf certified integrators with the highest-level expert certificate: Jamf 400. Inetum engineers have the necessary experience and competences to undertake even the most demanding implementations, including for companies from the financial sector.

Check how we can help: Apple Mobile Device Management (MDM) solution

Indicators

To start with, let’s sum up which elements are the most relevant if we would like to compare different models of IT architectures based on devices and software from different manufacturers. The most important indicators for my comparison will be the total cost of ownership (TCO) and the return on investment (ROI) mentioned in the introduction. When it comes to computer hardware, the following factors will have the most important impact on these indicators:

Hardware Total Cost of Ownership consisting of:

• The cost of devices
• Loss of residual value
• The cost of the operating system
• Potential costs associated with outdated software
• Additional software license costs

Return of Investment depending on:

• Savings on the delivery of devices
• Savings on device management
• Savings related to security management
• Increased employee efficiency

When I was writing this article, I tried to use as much hard data as possible – first of all in the scope of real financial values. However, it quickly turned out that a comparison of similar values such as the price of devices can be very difficult.Due to the number of models and versions differing from one another in terms of technical parameters and price, as well as the fact that the minimum functionality of the device means something completely different at each company, I had to limit myself and provide an estimate of the percentages only. However, it seems to me that such values allow us to form our own opinion and to make it reality at our company.

The cost of devices

Common opinion holds that Apple devices are more expensive than devices from other companies. However, these products are becoming increasingly available at prices comparable to other devices in this class. In addition, Apple offers a few ways to reduce the cost of purchasing equipment. One of them is the co-financing of the purchase of equipment by an employee. In exchange for bearing some of the costs, he can buy the equipment after a certain period of use. An advantage of this solution is the fact that the employee cares for such equipment as if it were his own, which reduces the risk of damage and breakdown.

Programs such as Apple Financial Services allow customers to reduce the cost of purchasing equipment, enabling the leasing of devices, software and Apple accessories for 12, 24, 36 or 48 months. The entire amount of the lease can be included as a tax-deductible cost, which allows you to lower your tax base. After the rental period, the equipment is returned to the reseller and exchanged for a new device.

The total rental cost of Apple Financial Services can be up to 30% lower than the market value of the device.

Residual value

It should also be remembered that Apple devices maintain their value much longer than devices from other manufacturers. Both supply and demand are responsible for this state of affairs. Compared to PCs, there are fewer Apple devices on the market, but there are also many more people willing to buy them – even if the equipment is used or damaged. This affects the high residual value of Apple devices, i.e. the price at which you can resell used equipment, which is definitely higher than other devices of the same age.

The cost of the operating system

Apple has a policy that all devices are always sold with the operating system pre-installed on them. This means that all Apple users can update the operating system immediately without any additional costs right after the release of the newest version.

In the case of PCs, the operating system is sold independently, which means that many devices run old or outdated versions. A similar problem occurs with Android phones, despite the fact that they have the ability to update the software. The reason is that a large number of phone models use the Android system and every one of them can have completely different technical parameters. Android developers have made it so users are accustomed to the fact that the next versions of the system will have greater hardware requirements, which often leads to problems with operation in the case of cheaper devices. Many users disable updates, fearful of slowing down the device or even damaging the system and losing data.

Security of software

One of the key principles of IT infrastructure security is regular software updates. Without them, even the best system will become vulnerable to attacks sooner or later. Apple’s strategy of providing all users with the latest version of the operating system has brought the intended effect in this respect. The last version of iOS from September 2018 had been installed on 78% of devices as of January 2019. In the case of Android, the Marshmallow version from October 2015 still remains the most popular (21.3% of devices), and the Android Pie, which was launched in August 2018, could not even exceed the level of 0.1% which would allow for entry to the Android development platform.

If we compare macOS and Windows, the results are similar. In February 2018, two years after its release, Windows 10 managed to eclipse the market share of its most popular predecessor, Windows 7, reaching 42% (neither Windows 8 from 2012 nor its later update Windows 8.1, failed to do so). However, this means that almost half of all users are still using an older version of Windows. In comparison, the latest version of macOS Mojave from September 2018 was the most popular version of the system after just three months (in December 2018), with a share of 32%.

Additional software license costs

Apple devices are delivered with a full set of the software which is necessary to start work, so there is no need for the additional installation of tools such as antivirus or office management software. Thanks to access to applications in the App Store, this basic functionality can be further developed with additional tools. Most importantly, applications available in the App Store, both free and paid versions, are verified for security and compatibility with devices running the latest version of the operating system.

In the case of PCs, the hardware requires additional costs for software licenses almost every time, especially devices for commercial purposes.

Savings on the delivery of equipment

The most time-consuming task which IT departments face is providing computers to employees. Each computer has to pass through the hands of administrators, who install the appropriate software and make the necessary configuration. Devices prepared in this way can be delivered to the end user. IT departments deal with this task in different ways. To reduce the time needed to provide equipment, static system images are often used and are then installed on all devices. Unfortunately, this approach requires the work of an administrator; moreover, all devices are clones and are not adapted to the needs of specific users.

This approach can cause real financial losses. If tools are installed on the devices by default (to reduce the number of tasks for the IT department in the future), this means unnecessary licensing costs. In big companies, it can cause a significant loss, which can’t be easily eliminated. The alternative is increased costs for the IT department, which would have to spend more time managing licenses and providing better-adapted equipment.

This problem can be eliminated by using an MDM system, such as Jamf Pro, which allows you to manage the delivery of Apple devices in the zero-touch deployment model. This allows you to deliver the device directly from the reseller to the end user, excluding the IT department. The device goes to the user in the original packaging, and the entire configuration process is carried out remotely using preconfigured installation rules, which enable the creation of any user groups to whom appropriate hardware configurations will be distributed, as well as applications and licenses.

The use of the Device Enrollment Program allows you to reduce the time needed to deliver devices by 80%, while Jamf Pro allows you to reduce the time needed to manage applications by 90%! (According to Jamf data)

For the user, the entire configuration process takes only a few basic steps, is intuitive, fast and enables the use of the device and all necessary tools for work in just a few minutes after unboxing. Eliminating the IT department from the hardware delivery process is cost-saving and allows administrators to focus on more critical business tasks.

Savings on using the help desk

Thanks to the use of the MDM system, the costs of device management are also significantly reduced. All administrative tasks can be performed remotely for Apple devices.

Research by IBM, which was one of the first organizations of this size to implement a significant number of Apple devices in its IT infrastructure, shows that Apple users do not use help desk support that often.

On the one hand, it results from the lower failure rate of hardware and the stability of the operating system, and on the other hand because of self-solving tools for problems.

Thanks to self-service functions, it is possible to reduce the number of requests sent to the technical service department by 15%.

The value of data security

Apple devices have a number of built-in mechanisms and tools to improve security, meaning that in many cases the IT department doesn’t have to undertake any additional activities and doesn’t have to invest funds in additional security.

The security of data on the disk is ensured by the built-in FileVault encryption function, while the security of the user is guarded by Gatekeeper, blocking the ability to install applications from unknown developers, as well as XProtect and MRT – built-in services protecting against malware threats. macOS also has a built-in system for creating an encrypted Time Machine backup.

All data on the device is encrypted by default, and not even Apple has the keys that would allow access to it without the user’s permission and knowledge. Apple devices also have additional security features, such as physically cutting the operating system off from the built-in microphone after closing the flap, which prevents eavesdropping and spying.

Thanks to Jamf Pro, we can implement and effectively enforce the security policy of IT infrastructure, above all through the management of updates, data encryption, passwords, and levels of access to key infrastructure elements. The system increases the scope of the employer’s control over the data on the employee’s device, so it is possible to carry out operations such as deleting data remotely if the device is lost, or sharing business data on the employee’s device if they can’t share data by themselves.

Increased employee efficiency

Enabling employees to choose the devices on which they prefer to work is obviously the easiest way to increase their efficiency – it is easier to work on a computer that we know and like. In addition, the amount of unproductive employee time is reduced; PC failure often involves the need to leave equipment with the IT department.

For Apple, it is very important to respect employee privacy and data security, especially since the popularity of remote work or Bring Your Own Device models are growing and blurring the boundary between work and leisure time. Jamf Pro enables the strict separation of business and private areas on the device. Therefore, the employer doesn’t have access to the employee’s private data, but he still has control over business data.

Summary

Jamf, a provider of dedicated systems for the management of Apple Jamf Pro mobile devices, has prepared a statement that allows you to estimate the potential savings from the introduction of Apple devices at your company:

• Shortens the delivery time of devices by 80%
• Shortens the time required for installing and updating applications by 90%
• Reduces the number of requests to the Help Desk department by 15%
• Lowers license costs by 2%
• Improves end-user productivity by 10%
• Reduces IT reporting time by 90%
• Reduces the time spent on security management and security policies by 65%

I hope that I have discussed all the key factors that will help to evaluate the specific business benefits of introducing Apple devices at your company.

Read more about Apple for Business offer here.

1. 1. Why should I have Macs at my company?
2. 2. How much does it cost?
3. 3. Apple workplace
4. 4. Security
5. 5. Is the Mac for everyone?

However, I have to admit that in every legend there is a grain of truth. Computers from Apple are able to do everything that most users need and they do it really well (if not the best – after all, in terms of user experience, Apple is the undisputed leader), but when it comes to advanced corporate needs, Microsoft would have a lot to say about that. However, this doesn’t mean that computers with the macOS system are not suitable for enterprise solutions. In many cases they will be even better than PCs – I’ll come back to this topic later. Primarily, we must remember that they can be easily integrated with an environment that is based on Microsoft solutions. macOS integrates perfectly with services run on Windows or Linux servers. It is worth noting a modern solution offered by Microsoft called Conditional Access, which provides integrated protection and access to Office 365 resources.

Why should I have Macs at my company?

Besides the fact that the iPhone has become one of the most popular business tools, there is still a relatively low number of Mac computers in the business environment (France, United Kingdom: 19% macOS, 77% Windows; Europe: 13%, 82%, Switzerland: 26%, 71%, Poland: macOS 4%, Windows 91%). However, Apple users are far more aware of the decisions they make and the opportunity to use products on an Apple, which is relevant for them when choosing an employer. So the choice of the device on which the employee is to work can have a huge impact on the company’s reputation. This is becoming a strong argument in the battle for valuable employees, which shouldn’t be underestimated at such a difficult time for the labor market.

In addition, companies that allow employees to choose their work devices confirm the difference in the user’s approach to such a computer, which is completely different than one’s approach to PCs. When an employee gets a new, foil-wrapped Mac, unpacks it and switches it on, he has everything that he needs to get started. Does it matter? Every user of Apple products knows that removing the foil from the new “Apple” is an actual ritual. What is more, the employee gets a computer that already suits his position and does not require further configuration or visits to the IT department, but I will come back to that aspect later.

How much does it cost?

Is it profitable to move to a Mac business environment? Yes, if the cost is estimated in a complex way and not only considers the price of the devices. The costs which should also be taken into consideration are software, technical support, delivery time and service engagement.

IBM carried out detailed research into the costs of managing Mac and PC devices respectively. The conclusions may be surprising for some people – it turns out that the use of Macs is cheaper by a third, even if we take into account the differences between the price of the devices themselves. Where does this difference come from? PC users have to use technical support twice as often as Mac users; moreover, problems with PC computers require the personal intervention of a technical specialist even 27% more frequently. At the time of publication of the IBM report, this percentage was only 5% in the case of Macs (at the moment it is even lower, only 3.5%).

This means that the satisfaction level of Mac business users is over 90%.

The purchasing process, from the purchase itself to the delivery of the ready-to-use device for the employee, is much shorter and cheaper. All you have to do is to order the device and it will be delivered directly to the employee, skipping the IT department. It doesn’t matter where the employee is located, which is important for companies that operate in many locations, or enable employees to work remotely. This is made possible by the Apple function for instant installation and activation of the device, the Apple Device Enrolment Program.

Apple workplace

The advantage of the Apple Device Enrolment Program is delivery of the newest and safest solutions each time the new device arrives at the company. Devices run on the Windows operating system, based on loading static images, are time-consuming in terms of preparation and delivery, and additionally the software on the new device may even be obsolete from the beginning and unable to fulfil the security requirements.

We need to remember that with Mac products we get the operating system and the iWork package as well, enabling us to work in a group. For companies that actually use the Office package, a fully compatible version of Office 365 is available. Apple solutions function as part of an excellent ecosystem of devices which cooperate with each other. Devices based on iOS like the iPhone and iPad, as well as Apple TV, are the best examples.

Modern management of Mac computers means that users can independently download the required applications as part of an internal app store. Apart from that, any problem which may eventuate can be solved on its own – all you need to do is to choose the corrective function. Additionally, Apple supports BYOD (Bring Your Own Device) politics, where you can separate private and business elements. Thanks to this, the company has a guarantee of security, and the employee’s privacy is fully secured.

Security

This is another area where a lot of myths arise. We can still hear that there are no viruses which could infect Apple devices. But is this true? Unfortunately not. There are viruses which can be dangerous for devices running on iOS or macOS, but fortunately the built-in security system efficiently repels those kind of attacks. The security of the data on the computer disk is ensured by the built-in encryption function FileVault; however the user’s security is guarded by the Gatekeeper, which blocks the installation of applications from unknown developers. Another similar product is X-protect – a built-in system that protects users from malware threats. macOS also has a built-in system to create an encrypted backup, called Time Machine.

At this point, it is also worth mentioning ransomware attacks which we have heard about over the last year. The WannaCry virus, which encrypted millions of computers all over the world, was completely harmless for Apple devices. IT system administrators found out the hard way that the dependence of the entire company’s infrastructure on one operating system can be very dangerous. After the WannaCry attack, a lot of companies made the decision to buy Mac computers for their employees.

It is recommended that 15-25% of employees should use Apple devices in their daily tasks. Thanks to this, at least some of the devices will be secure in the event of a possible attack, maintaining the operational capacity of the company until the rest of the infrastructure is restored. So this is a form of protective vaccination against computer viruses – even if your company gets sick, at least it will not die.

Is the Mac for everyone?

The choice between the Mac vs. PC should definitely be considered in depth, however the main obstacle is certainly not the existing company architecture (servers running on Windows), but rather the software requirements. Most of the popular software on the market comes in versions for macOS (such as Office or Adobe Creative), but more specialized business systems may not have these versions. Therefore, it’s necessary to check all the systems used at your company and only then decide on the introduction (or otherwise) of Macs in your organization.

Let me try to prove my hypothesis- Doing IT business is like participating a Champions League tournament… by providing a thesis in the example below:

Since the beginning of this year (January 2012) we have been focusing to prepare ourselves for participating in the biggest Mobile Conference in Europe called Apps World 2012.
As an IT Company we deciding to join the most influential event in Europe related to mobile industry, where top market leaders from all over the world included: developers, mobile marketers, mobile operators, device manufacturers, platform owners and industry professionals are meeting in one place, once per year: at Earls Court 2 in London!

I personally believe that there are a lot of common factors when a football club is preparing for the Champions League tournament and IT Company is preparing for attending the most crucial event in the IT industry.

If you ever watch a football team interview before the Champions League game, you can always hear the following words showing up in the statements:
Prestige, confrontation, positioning, knowledge & experience exchange, bitter defeat, mobilization, strategy, challenges, harnessing our own stereotypes, fight, and many more…

It means that we, people are not so far away from each other, no matter what the industry, social status or any other differentiating factor is.

While attending the Apps World 2012, we felt that we are there rather small (with services offering, scale of product influence), when comparing with brands like: Google, Apple, Facebook, Samsung, etc. but on other hand, we had chance to make live interaction with them, try to see what their good and weak sides are, how they are preparing their business model and long term strategy. But even if you stand in front of your competitor acting as Dawid meeting Goliath, and your chances to win anything seem very low, there is a glimmer of hope. Because all the pressure is put on your “enemy” you do not feel any prejudice and paradoxically you can win even more than you might have expected before.

We spent some very busy time during those 2 days of exhibiting at Earls Court 2 in London (See some selected pictures below). We met a lot of interesting people (hundreds of business cards exchanged), had some nice brainstorm discussions with business owners and also shared our knowledge and industry approach with workshop attenders on panel discussion: “In-House app building versus working with vendors, and pre-packaged solutions”. We gained a lot of fresh inspiration how to handle security (in the development process) and how to monetize the mobile applications. We also had a chance to review and focus on our core mobile and web based solutions. We were being asked about dedicated solutions, resources availability and technology focus.

We were surprised when, at the first day of exhibition, we saw two project leaders from our current Belgian Client (this year we developed together top sports applications such as: Tour de France, Olympic Games or Gouden11).
They decided to attend Apps World event to get an industry update and meet us there as a partner to share their experience with prospects visiting our stand (#65) and explain to them the near-shore cooperation model (focusing on team extension mode).

The idea of entitling my blog post: “Doing IT business is like participating a Champions League tournament…” has its beginnings in watching a Champions League game: Arsenal London – Olympiakos Pireus (on the Emirates Stadium in London). We have been invited by our Belgian Client to go out for a match on Wednesday evening (just after the 2^nd day of exhibition), 3th of October and integrate with each other watching an incredible football performance LIVE!
Doing IT business is really similar to the Champions League tournament. If you focus on the top things, you head to get the top Clients, top projects and top IT knowledge. But it also goes in the same direction with the local league. If your ambition and carrie  goal is to win only the local league, you will become what you deserve, like in the Ben Howard’s song “The Fear”.

And the last important conclusion:
If you would like to join the Champions League tournament and win the main award later on, please remember that your whole team needs to put their hearts in the desire to fight for IT; doing IT alone will be useless…

FinTech

Who will be for sure interesting in adapting this brand new technology:

• Handset Manufacturers
• Mobile Network Operators (MNOs)
• Mobile Service Providers / Merchants
• Financial Institutions / Banks / Credit Card Companies

As the penetration of smart phones increases, new opportunities exist for handset manufactures to monetize in the mobile payments market. Apple and Google are ensuring that they gain the early movers advantage with innovative mobile payment strategies. NFC enabled phones are also on the rise, further fuelling the market.

As customers adopt mobile payments, future of debit and credit card payments will change. I definitely believe that the “mobile wallet” will eventually replace the plastic card – but it’s going to take some time because consumer habits take a long time to change like it was with the outdated vinyl records. The end of credit card is coming, we will be witnesses of bringing payments forward from the plastic age to the digital age.

Read our client stories: Fintech Software Development