Skip to content

Remote Wipe

What is Remote Wipe?

The capability to remotely delete all data from a lost or stolen mobile device to prevent unauthorized access to sensitive information.

Information Security

Each of these is named in at least one of the same controls as remote wipe. The number is how many controls name both.

What the standards actually require on remote wipe

Requirements naming remote wipe across 6 standards, quoted from the control text.

Be able to wipe enterprise data remotely from portable end-user devices the enterprise owns, and do so when judged necessary, for example when a device is lost or stolen or when its user stops supporting the enterprise.

CIS-4.11 · Enforce Remote Wipe Capability on Portable End-User Devices →

Be able to wipe enterprise data remotely from enterprise-owned portable devices when appropriate, for example after loss or theft or when the user leaves. Implementation Groups: IG2 and IG3 (not in the IG1 baseline; applies from IG2 upward). Asset type: Data.

cis-controls-v8-1::4.11 · Enforce Remote Wipe Capability on Portable End-User Devices →

Be able to delete company data remotely from a managed endpoint, through a defined and evaluated process.

CCM-UEM-13 · Remote Wipe →

The organisation sets up, operates and evaluates processes, procedures and technical measures that let it erase company data remotely from managed endpoint devices.

cloud-security-alliance-cloud-controls-matrix-ccm-v4-1::UEM-13 · Remote Wipe →

Enable remote wipe for managed devices. Configure selective wipe for BYOD to remove only enterprise data. Test wipe capabilities regularly.

MD124-CTL-03 · Remote Wipe Capability →

The bank uses measures such as encrypted, separated containerised apps for business use on mobile devices, as applicable, and can remotely wipe them.

rbi-cybersecurity-framework-for-banks::87 · Para 87: containerised business apps on mobile devices with remote wipe →

Questions people ask about remote wipe

What is Remote Wipe?
The capability to remotely delete all data from a lost or stolen mobile device to prevent unauthorized access to sensitive information.
Why is Remote Wipe important for compliance?
Remote Wipe is a key concept in Information Security. Understanding remote wipe helps organizations meet regulatory requirements, reduce risk, and demonstrate due diligence during audits. Our compliance platform maps 1,016 frameworks with 316K cross-framework control mappings.
Which compliance frameworks address Remote Wipe?
Remote Wipe appears in the requirement text of CIS Controls v8, CIS Controls v8.1, Cloud Security Alliance Cloud Controls Matrix (CCM) v4.0.1, Cloud Security Alliance Cloud Controls Matrix (CCM) v4.1, NIST SP 800-124 Revision 2 - Guidelines for Managing the Security of Mobile Devices. Across these standards we have identified 6 controls that name it directly, each linked to the control text on the compliance platform.
Where can I learn more about Remote Wipe?
Explore our compliance framework pages to see how remote wipe applies across different standards and regulations. Our implementation guides provide step-by-step guidance, and the compliance platform offers AI-powered analysis of how this concept maps across 1,016 frameworks.

See how Remote Wipe applies across compliance frameworks

Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.

Written and maintained by Gerard Blokdyk, The Art of Service.