CHECKLIST

Make Sure Your Device Security Policy Is...

• Documented guidance on safe device use 

• Accessible to entire organization

• Reviewed and updated regularly 

Make Sure Your Device Security Policy Includes...

• Who is responsible for the device

• How the organization manages the device

• Who has access to the device

• What actions your organization will take in case of damage, loss, or theft of the device

Include Who is Responsible for Devices

• Bring Your Own Device (BYOD)

  • Employees use personal devices on work networks

• Company-Owned Business Only (COBO)

  • Organization provides employees with business-only devices

• Company-Owned Personally Enabled (COPE)

  • Organization provides employees with device for work and personal use

Include Who Manages Devices

• Endpoint Management 

  • Supervising and authenticating access to endpoint devices

  • Mobile phone, laptop, tablet, despot, server

• Mobile Device Management 

  • Monitor, managing, and securing company-owned or personal devices 

Include Guidance on Working From Home 

• Guidance on how to keep mobile devices secure at home

• How to keep devices updated

• How to avoid sharing devices with family and friends 

Include Information on Access to Devices/Systems

• Onboarding/Offboarding 

  • How to onboard new staff members

  • How to set staff permission levels 

  • Providing guidance on what staff can/can't do with devices

  • Offboarding employees and collecting devices/deactivating access

• Login Policy

  • Specify number of times users can enter incorrect login details 

  • Limit number of logins per day

• Third-Party Providers/Contractors

  • Include protocols for authentication and access

  • Require antivirus and malware protection 

  • Consider using CAT

• Lost or Stolen Devices

  • Who will report the theft/loss and when?

  • Who will receive the report?

  • What steps will your organization take?

• Devices During a Crisis

  • How will you safeguard devices and data during:

    • Pandemics

    • Conflicts

    • Natural disasters

    • Civil unrest