Sign in Subscribe

What steps should be taken to secure data on a lost or stolen mobile device?

Last updated on 

Securing data on a lost or stolen mobile device is crucial to prevent unauthorized access and protect sensitive information. Below are technical steps that can be taken to enhance the security of data on such devices:

  1. Remote Device Management:
    • Mobile Device Management (MDM): Implement an MDM solution to remotely manage and secure mobile devices. MDM allows for the enforcement of security policies, remote data wipe, and device tracking.
  2. Encryption:
    • Full Disk Encryption (FDE): Enable FDE to encrypt the entire storage of the device. This ensures that even if the physical device is compromised, the data remains unreadable without the correct decryption key.
  3. Biometric Authentication and Strong Passcodes:
    • Biometrics: Encourage or enforce the use of biometric authentication methods, such as fingerprint or facial recognition, to enhance access control.
    • Complex Passcodes: Require users to set strong, alphanumeric passcodes for additional security.
  4. Remote Data Wipe:
    • Remote Wipe: Implement a mechanism for remote data wipe in case the device is lost or stolen. This can be triggered through MDM or remote management tools to erase all data on the device.
  5. Two-Factor Authentication (2FA):
    • 2FA: Enable 2FA for access to sensitive applications and services. This adds an extra layer of security by requiring a secondary authentication method.
  6. Geofencing and Location Tracking:
    • GPS Tracking: Use GPS or other location tracking mechanisms to determine the device's location. This information can be useful for locating a lost device or triggering security measures when the device is outside a predefined geographical area.
  7. Application Security:
    • App-Level Security: Implement security measures within applications, such as requiring authentication for access, encrypting sensitive data stored within apps, and enabling remote app locking or wiping.
  8. Secure Backup and Restore:
    • Encrypted Backups: Ensure that device backups are encrypted to protect data even when stored on cloud services or other backup solutions. Additionally, use secure methods for restoring data only to authorized devices.
  9. Regular Updates and Patching:
    • OS and App Updates: Keep the operating system and all installed applications up-to-date with the latest security patches to address vulnerabilities that could be exploited.
  10. Network Security:
    • VPN Usage: Encourage the use of Virtual Private Networks (VPNs) to secure communication and data transmission over public networks.
  11. User Education:
    • Security Awareness Training: Educate users about the importance of securing their mobile devices, including the use of strong passwords, avoiding suspicious apps, and reporting lost devices promptly.
  12. Remote Locking:
    • Remote Device Lock: Provide the capability to remotely lock the device to prevent unauthorized access, even if a full data wipe is not immediately necessary.