Mobile device management (MDM)

Mobile device management is software that lets an organization configure, secure, monitor and, if needed, remotely wipe the phones, tablets and laptops used for work.

MDM tools such as Microsoft Intune allow IT staff to push security settings, require a screen lock, enforce encryption, install approved apps and separate business data from personal data. If a device is lost or stolen, company information can be removed remotely.

Staff in Alberta businesses often check email from job sites, trucks, client offices and home. Every one of those phones and laptops can carry customer information protected under PIPA. Without MDM, you may have no way to know whether a lost phone was locked or encrypted, which makes breach decisions much harder.

Practical tip: decide on a clear policy for personal devices before rolling out MDM. Many organizations use app-level protection on personal phones, which secures only work apps and data, and full device management on company-owned equipment. Explain the policy to staff so they understand what IT can and cannot see.