Prepare for mobile-device loss

Editorial update: 21 September 2026. Introductory learning material.

A mobile-device action plan should explain what happens before and after a phone or tablet is lost, replaced or suspected compromised.

• Record ownership and approved business use.
• Keep required updates, screen locks and encryption enabled.
• Know which work accounts and data the device can reach.
• Provide a prompt reporting route and an authorized response owner.
• Plan access revocation, recovery and replacement.

Remote lock or wipe is only one possible response. Its availability depends on the device and connection; on personal devices, agree the scope and privacy implications in advance.

Activity: Practice reporting a lost device without actually locking or erasing one. Confirm that the response owner can identify the affected business accounts.

Reference: FTC cybersecurity guidance for small businesses. Check the source and your system provider’s current instructions before implementation.