MDM-01—Mobile Device Enrollment

>Control Description

Mobile devices (i.e., laptops, smartphones, tablets) must be configured with the appropriate Mobile Device Management (MDM) profile when used as a medium to access Organization internal resources.

Theme

Process

Type

Preventive

Policy/Standard

Mobile Device Policy

>Implementation Guidance

1. Ensure that a Mobile device management process is defined and documented. 2. Ensure that all mobile devices are registered and configured within the appropriate Mobile Device Management (MDM) to access the internal resources.

>Testing Procedure

1. Inspect the Mobile device Policy to ensure that a Mobile Device management process is defined. 2. Inspect the list of mobile devices to verify that the devices are registered within the Mobile Device Management (MDM) tool. 3. For a sample of devices, validate that the devices are configured with the MDM tool and that it cannot be disabled from the end user device.