Databricks Implements Mobile Security Strategy with Zero Trust and MDM

Databricks has launched a mobile security strategy that emphasizes Zero Trust Network Access (ZTNA) and Mobile Device Management (MDM) to secure corporate data on personal devices. The initiative aims to protect data without intruding on user privacy, as stated by Databricks IT, which noted, "The challenge we set out to solve was simple to state and hard to do: protect corporate data on devices we don't own, without ever intruding on user privacy."

The strategy incorporates Account-Driven User Enrollment (ADUE) for iOS devices, ensuring that access is granted based on device health rather than identity alone. Databricks IT asserts that "no request is granted on identity alone," reinforcing their commitment to stringent access controls. The principle of denying access by default is central to this approach, with permissions only granted when acceptable conditions are met. This reflects a broader trend in enterprise security where continuous verification is prioritized, particularly for critical applications.

The ongoing development and implementation of this mobile security strategy involve collaboration with the Engineering and Partnering teams. The enrollment policy has been reviewed in conjunction with Legal and Privacy teams to ensure compliance and user trust. Databricks emphasizes that "trust is built through this high level of transparency," highlighting the importance of user confidence in security measures.

This initiative follows a growing need for organizations to manage security effectively on personal devices, as no single control can fully secure mobile devices, according to Databricks IT. The implications for practitioners include a more robust framework for securing sensitive data accessed via personal devices, aligning with the increasing adoption of remote work and BYOD policies.