This can be done over the air, according to Guzelian, meaning that workers can bring their own handset into the corporate environment and have it secured for enterprise use.
"You can go and buy a Galaxy S3, call us with the IMEI number, and we can basically re-flash it over the network. Afterwards, no-one else can update the operating system, and the user is limited to what they can add - apps can only come from an approved app store," he said.
http://www.v3.co.uk/v3-uk/news/2250071/general-dynamics-secures-samsung-and-lg-android-smartphones-to-take-on-blackberry
"Security researcher" Dan Rosenberg makes an ass of himself. Ars Technica helps:
http://arstechnica.com/security/2014/03/virtually-no-evidence-for-claim-of-remote-backdoor-in-samsung-galaxy-phones/
What an idiot.