What to do if a company-owned mobile phone is lost, can we wipe the data, what should be done first

happened to us too... accounting's phone. they panicked big time we reset the account in 2 hours. data was gone but we felt relieved

edit: typed from phone, sorry for typos.

Use Find My Device (Google) and Find My iPhone (Apple) to track the phone's location and wipe it remotely.

first thing to do = reset email.. then then need to notify the bank if theres a credit card

Exactly like that. If you get three different answers on a topic, the question was asked wrong.

Processes without records never improve, because you don't know what to fix. Of course, it varies if your situation is different.

Let me share what happened to me; it might be useful. If you don't write this down from the start, it leads to arguments later.

When you try to change everything at once, nothing settles. If I were you, I'd go this route.

Let me share what happened to me; it might be useful. Having backups accessible on the same network and with the same identity makes them part of the target.

Everyone rushing into if phone is lost gets stuck at the same point.

Let me share my experience. When making decisions, write down the worst-case scenario too, not just the best.

I agree, and I'd like to emphasize that. Most time waste accumulates in tasks waiting for approval.

Don't hesitate to ask; those who don't ask always pay more. Hope this helps.

we got stuck at the same point for a while but like everyone rushing into if phone is lost gets stuck at the same point.

this is my opinion, Im not claiming its absolute truth.

Could you elaborate on that? If it's your first time, start small; scaling comes later.

If you don't write this down from the start, it leads to arguments later. If you post the result here, it will help others too.

The answer above hits the nail on the head. The answer varies greatly by industry; there is no one-size-fits-all rule.

There's one point I'm curious about. The answer varies greatly by industry; there is no one-size-fits-all rule.

Proven by experience.

You're right. Security isn't absolute; it's about making attacks not worth the effort.

Most incidents start with a leaked password, not a vulnerability. If I were you, I'd go this route.

Im curious too.

You're right.

thanks this was very helpful. i mean if 2FA is on a stolen password alone is useless.

this is my opinion I'm not claiming it's absolute truth.

I completely agree. If you get three different answers on a topic the question was asked wrong.

Correct me if I'm wrong.

ill argue the opposite, dont get mad. tbh having backups accessible on the same network and with the same identity makes them part of the target.

just leaving this note it might be useful.