My mobile team installed company email and WhatsApp on their cell phones. Can we wipe the data if the phones are lost or stolen?
Does this usage create legal issues? Is it a violation of employee privacy?
Company apps on personal phones are risky. Protocol: You need written permission + MDM (Mobile Device Management) software installed.
we suffered too... when an employee's phone got lost the data was gone. now we told them to install mdm but most refused
Steps: 1. Draft a written policy 2. Set up MDM (Intune, Google Workspace) 3. Reset passwords for secret keys 4. Enable remote wipe option
Microsoft Intune and Google Workspace allow you to manage personal devices. You can remotely wipe company data.
company data on personal phone = risk solution is mdm but employees are scared they'll be accused of software piracy... provide training
If an employee keeps company data on their personal phone the company can't be held liable if the phone is lost. The written policy must be signed.
Thanks, that was the answer I was looking for. If you don't write this down from the start it leads to arguments later.
If I were you, I'd go this route.
You're right I've been down that road too. The biggest time-waster for us was not knowing who had the final say.
Proven by experience.
Following. When making decisions, write down the worst-case scenario too, not just the best.
Just leaving this note it might be useful.
I feel the same way. An automated scan report is not the same as a penetration test.
If I were you, I'd go this route.
Thanks, this was very helpful. People defend habits, not processes. Resistance comes from there.
If I were you, I'd go this route.
My perspective changed after experiencing that. Security isn't absolute; it's about making attacks not worth the effort.
If I were you I'd go this route.
There's a trap here, let me mention it. Most incidents start with a leaked password, not a vulnerability.
Taking measures without an inventory leaves doors you haven't seen open.
Doki · Brand identity · 2026
Let's separate the concepts, they're getting mixed up. Security isn't absolute; it's about making attacks not worth the effort.
Doki · Phishing awareness training · 2024
Sorry, but this doesn't apply in every case. Don't hesitate to ask; those who don't ask always pay more.
That's all, sorry if I went on too long.
Exactly, and not many people know this. The real issue isn't the number, but what it's based on.
Good luck with that.