Free ebook: NIS2 ready using ISO 27001 best practices
Download ebook

Personnel guidelines for safe usage of mobile devices

Critical
High
Normal
Low

There are separate instructions for staff to use mobile devices. The instructions cover:

  • restrictions on installing software and using various services on your organization's devices
  • procedures for the registration of new devices
  • requirements for physical protection of equipment and installation of updates
  • access control requirements
  • protecting your organization’s data with encryption, malware protection, and backup
  • the ability of the organization to remotely control the device
Connected other frameworks and requirements:
11.2.6: Security of equipment and assets off-premises
ISO 27001
6.2.1: Mobile device policy
ISO 27001
10.1.1: Policy on the use of cryptographic controls
ISO 27001
11.2.8: Unattended user equipment
ISO 27001
12.6.2: Restrictions on software installation
ISO 27001

Authorized users and rules for installing software and libraries

Critical
High
Normal
Low

Unmanaged installations of software on computers can lead to vulnerabilities and security breaches.

The organization should determine what types of software or updates each user can install. The instructions may include e.g. the following guidelines:

  • only specially designated persons may install new software on the devices
  • programs previously designated as secure may be installed by anyone
  • use of certain software may be impossible for everyone
  • existing software updates and security patches are allowed to be installed by anyone
Connected other frameworks and requirements:
12.6.2: Restrictions on software installation
ISO 27001
DE.CM-5: Unauthorized mobile code detection
NIST CSF
8.19: Installation of software on operational systems
ISO 27001

Automatic blocking and detecting of unauthorized software

Critical
High
Normal
Low

Our organization has defined policies in place to prevent or at least detect the use of unauthorized programs.

Connected other frameworks and requirements:
12.2: Protection from malware
ISO 27001
12.2.1: Controls against malware
ISO 27001
DE.CM-5: Unauthorized mobile code detection
NIST CSF
8.7: Protection against malware
ISO 27001
No items found.