Skip to content

Remote Wipe

What is Remote Wipe?

The capability to remotely delete all data from a lost or stolen mobile device to prevent unauthorized access to sensitive information.

Information Security

Terms that appear alongside remote wipe

Each of these is named in at least one of the same controls as remote wipe. The number is how many controls name both.

Frameworks that govern remote wipe

ISO 27001:2022View framework →NIST SP 800-53 Rev 5View framework →CIS Controls v8View framework →

What the standards actually require on remote wipe

Requirements naming remote wipe across 6 standards, quoted from the control text.

CIS Controls v81 control

Remotely wipe enterprise data from enterprise-owned portable end-user devices when deemed appropriate such as lost or stolen devices, or when an individual no longer supports the enterprise.

CIS-4.11 · Enforce Remote Wipe Capability on Portable End-User Devices →
Cloud Security Alliance Cloud Controls Matrix (CCM) v4.0.11 control

Be able to delete company data remotely from a managed endpoint, through a defined and evaluated process.

CCM-UEM-13 · Remote Wipe →
NIST SP 800-124 Revision 2 - Guidelines for Managing the Security of Mobile Devices1 control

Enable remote wipe for managed devices. Configure selective wipe for BYOD to remove only enterprise data. Test wipe capabilities regularly.

MD124-CTL-03 · Remote Wipe Capability →
C5 (Germany)1 control

Document, communicate and issue acceptable use and safe handling instructions spanning approval for acquisition through disposal, classification and labelling, secure configuration, software versions and patching, unsupported software, installation restriction...

C5-AM-02 · Acceptable Use and Safe Handling of Assets Policy →
Cyber Essentials Plus1 control

Mobile devices used to access corporate data must be managed, encrypted at rest, require a screen lock and be capable of remote wipe.

CEP-MOB-01 · Mobile Device Management and Encryption →
FBI CJIS Security Policy1 control

Apply additional controls for mobile devices accessing criminal justice information, including device management, encryption, and remote wipe.

CJIS-5.13 · Mobile Devices →

Questions people ask about remote wipe

What is Remote Wipe?
The capability to remotely delete all data from a lost or stolen mobile device to prevent unauthorized access to sensitive information.
Why is Remote Wipe important for compliance?
Remote Wipe is a key concept in Information Security. Understanding remote wipe helps organizations meet regulatory requirements, reduce risk, and demonstrate due diligence during audits. Our compliance platform maps 686 frameworks with 311K cross-framework control mappings.
Which compliance frameworks address Remote Wipe?
Remote Wipe appears in the requirement text of CIS Controls v8, Cloud Security Alliance Cloud Controls Matrix (CCM) v4.0.1, NIST SP 800-124 Revision 2 - Guidelines for Managing the Security of Mobile Devices, C5 (Germany), Cyber Essentials Plus. Across these standards we have identified 6 controls that name it directly, each linked to the control text on the compliance platform.
Where can I learn more about Remote Wipe?
Explore our compliance framework pages to see how remote wipe applies across different standards and regulations. Our implementation guides provide step-by-step guidance, and the compliance platform offers AI-powered analysis of how this concept maps across 686 frameworks.

See how Remote Wipe applies across compliance frameworks

Our platform maps 686 frameworks with 311K cross-framework control mappings. Explore how this concept is addressed across standards.

Explore on Platform
Written and maintained by Gerard Blokdyk, The Art of Service.