Maintain secure devices

Learning edition: 5 October 2026. Introductory learning material.

Use a documented baseline for each type of device. A laptop, phone and connected appliance may need different controls.

• Use supported software and timely security updates.
• Enable appropriate screen locking and encryption.
• Use approved endpoint protection where supported.
• Limit administrative access and install applications from approved sources.
• Record device ownership, recovery arrangements and the reporting route for loss or compromise.

Remote-wipe features require prior agreement and testing. They may affect personal data and may not work while a device is offline; they do not replace access revocation or backups.

Activity: Compare one approved device with your organization’s baseline and record any exceptions for review.

Reference: FTC cybersecurity guidance for small businesses. Check the source and your system provider’s current instructions before implementation.

Be careful with extensions and suggested fixes

Install software and browser extensions only through the approved process. A convincing download page or AI-generated recommendation is not evidence that a tool is safe. Keep the browser, operating system and protection software updated.

Fake verification or support pages may ask you to paste a command into the computer’s Run box or terminal. Stop and use your known support route. If you already ran it, report promptly and follow your incident procedure; do not attempt a self-directed cleanup.

Further reading: Microsoft: Think before you Click(Fix) (21 August 2025).