Skip to content

Mobile Device Management

What is Mobile Device Management?

A solution that allows organizations to manage, monitor, and secure employees' mobile devices that access enterprise data and applications.

Information Security

Each of these is named in at least one of the same controls as mobile device management. The number is how many controls name both.

What the standards actually require on mobile device management

Requirements naming mobile device management across 6 standards, quoted from the control text.

Mobile Device Management solutions that have completed a Common Criteria evaluation against the Protection Profile for Mobile Device Management, version 4.0 or later, are used to enforce mobile device management policy.

ISM-1195 · Mobile Device Management solutions that have completed a Common Criteria evaluation agains

Mobile devices used to access corporate data must be managed, encrypted at rest, require a screen lock and be capable of remote wipe.

CEP-MOB-01 · Mobile Device Management and Encryption

Mobile devices accessing institution data are managed via MDM with encryption, remote wipe, and policy enforcement.

IS-IV.D.2 · Mobile Device Management

Apply the applicable mobility SRG and mobile-device STIGs, covering mobile device management, mobile OS configuration and removable-media controls.

STIG-SRG-MOB · Mobility and mobile device STIG

The Privacy Protection (Data Security) Regulations 5777-2017 (Takhanot Hagannat Hapratiyot - Avtahat Meidah) supplement the 1981 Law with detailed technical and organisational security requirements + graduated by Security Level Classification (Basic/Medium/Hig...

IsraelPPL-DataSecurity-Regulations2017-ISO-CISO-Access-Logging-Backup-Physical-Removable-Annual-Audit · Israel POPL Data Security Regulations 5777-2017 + ISO Information Security Officer + Access Control + Logging + Backup + Physical Security + Removable Media + Risk Assessment + Penetration Testing + Annual Internal Audit + Amendment 13 Cyber Updates
MITRE ATT&CK1 control

Select and apply appropriate ATT&CK matrix for target environment. ATT&CK FOR ENTERPRISE primary matrix covers Windows + macOS + Linux + Office Suite + IaaS + SaaS + Identity Provider + Network platforms.

MITRE-ATTACK-Matrices-Enterprise-Mobile-ICS-Cloud-AWS-Azure-Google-Office-365-Container-Platform-Specific · MITRE ATT&CK Matrices + Enterprise + Mobile + ICS + Cloud + AWS + Azure + Google + Office 365 + Container

Questions people ask about mobile device management

What is Mobile Device Management?
A solution that allows organizations to manage, monitor, and secure employees' mobile devices that access enterprise data and applications.
Why is Mobile Device Management important for compliance?
Mobile Device Management is a key concept in Information Security. Understanding mobile device management helps organizations meet regulatory requirements, reduce risk, and demonstrate due diligence during audits. Our compliance platform maps 686 frameworks with 311K cross-framework control mappings.
Which compliance frameworks address Mobile Device Management?
Mobile Device Management appears in the requirement text of Australian Information Security Manual, Cyber Essentials Plus, FFIEC IT Examination Handbook, DISA Security Technical Implementation Guides (STIGs), Israel Protection of Privacy Law (5741-1981). Across these standards we have identified 6 controls that name it directly, each linked to the control text on the compliance platform.
Where can I learn more about Mobile Device Management?
Explore our compliance framework pages to see how mobile device management applies across different standards and regulations. Our implementation guides provide step-by-step guidance, and the compliance platform offers AI-powered analysis of how this concept maps across 686 frameworks.

See how Mobile Device Management applies across compliance frameworks

Our platform maps 686 frameworks with 311K cross-framework control mappings. Explore how this concept is addressed across standards.

Written and maintained by Gerard Blokdyk, The Art of Service.