The 3 Android security questions customers ask me most often

By Erik Siera, Channel Sales Manager Benelux, Nordics & Baltics at ProDVX

Whenever I talk to customers about Android devices, security quickly becomes part of the conversation. Whether an organisation is deploying ten devices or several thousand, I usually get asked the same three questions.

1. Will my devices receive security updates automatically?

The first thing I always explain is that it depends on which type of Android device you're using. That distinction is more important than many people initially realise.

EDLA-certified devices receive regular security updates if automatic updates are enabled through your Enterprise Mobility Management (EMM) or Mobile Device Management (MDM) solution. So, if everything is configured correctly, you don't need to remember updates, they simply happen in the background.

For AOSP-based devices, the update process works a bit different. Firmware updates may include security patches, bug fixes, performance improvements and new functionalities. These updates can be distributed centrally through a device management tool such as ProMGR, or another third-party MDM solution, helping organisations avoid updating devices individually. The only difference is that you need to keep track of when new firmware becomes available and need to determine whether it is suitable for their specific environment before deploying it across the device fleet. 

2. How long will my devices continue receiving security updates?

This is probably the question that surprises customers the most. Many assume that Android security support starts when they purchase or deploy a device, but that is not how the Android lifecycle works.

Google’s security support starts when an Android version is released. This means that, depending on when the hardware is purchased, part of the official support period may already have passed before the device is installed.

I have spoken with customers who expected to have several years of security support remaining, only to discover that the actual period was much shorter. Nothing had gone wrong; it was simply a result of how the Android lifecycle is structured.

That is exactly why we developed ProSECURE. It extends security support for an additional three years beyond Google’s official support period, with continued vulnerability monitoring, security patches and firmware maintenance. Devices in our main product line generally receive two firmware releases per year, while older models that are no longer actively sold receive one firmware release per year. 

Those additional years can make a significant difference. They help organisations keep devices secure for longer, extend the usable lifetime of their hardware and delay costly replacement projects.

3. How do I stop users from using the device for anything other than its intended purpose?

This is one of the most practical questions I receive, especially from organisations deploying devices in public or shared environments.

For most deployments, kiosk mode is the logical starting point. It allows you to restrict the device to a single application, a selection of approved applications or one specific website. This prevents users from leaving the intended environment, accessing Android settings or installing additional software.

However, kiosk mode is only one part of the solution. Additional protection can be provided through Android security controls, ProMGR, third-party software and integrations through the ProDVX API.

In the full article on the ProDVX website, we take a closer look at how these different security layers work together.

Security is a combination of layers

What I always explain to customers is that effective device security does not rely on a single feature. It comes from combining automatic updates, long-term support, device management, user restrictions, firmware protection and secure integrations.

When these layers work together, you stay in control of your deployment and your devices remain secure, reliable and focused on their intended purpose throughout their lifecycle.

Want to learn more about Android security?

These are the three Android security questions I hear most often, but each topic includes several additional considerations.

Read the full article on the ProDVX website to learn more about automatic updates, long-term security support and the different layers that help keep Android devices secure and focused on their intended purpose.

ProDVX Europe is a Dutch manufacturer of high-quality interactive display solutions. We pride ourselves for having over 20 years of experience and an in-house product development team. Our mission is to deliver reliable business continuity to our clients with solutions that are designed to be Always On.