simpl.
GRC Cybersécurité 14 points

Mobile Device Management & BYOD Security Audit

Cette liste de contrôle est en anglais.

Audits enrollment, configuration, and data protection controls for corporate and personally owned mobile devices under an MDM/UEM program.

CIS v8NIST 800-124ISO 27001

PDF ou Word gratuit · saisissez votre e-mail pour le télécharger.

Enrollment & Policy

  • Are all mobile devices accessing corporate data enrolled in an MDM/UEM platform? *
  • Is there an approved BYOD policy that users acknowledge before enrollment? *
  • Are device compliance policies enforced as a condition of access? *
  • Are jailbroken or rooted devices detected and blocked? *

Configuration Hardening

  • Is device-level encryption enforced on all managed devices? *
  • Are screen-lock passcodes and inactivity timeouts enforced by policy? *
  • Are OS and app updates enforced within a defined window? *
  • Is app installation restricted to approved or managed app catalogs?

Data Protection & Separation

  • Is corporate data containerized and separated from personal data on BYOD devices? *
  • Is copy/paste and data sharing between managed and unmanaged apps restricted? *
  • Can corporate data be selectively wiped without affecting personal data? *

Loss & Offboarding

  • Can lost or stolen devices be remotely locked and wiped? *
  • Is corporate access revoked and data removed upon employee offboarding? *
  • Are lost or stolen device events reported through the incident process?

Téléchargez la liste de contrôle Mobile Device Management & BYOD Security Audit complète

Obtenez-la gratuitement en PDF propre et imprimable, ou en document Word modifiable.