Enterprise mobility

search account_circle

policyASD ISM

Guidelines for enterprise mobility

51 controls in this part of theAustralian Government Information Security Manual. Each control links to plain-English guidance, audit tips and cross-framework mappings.

Enterprise mobility

Disable Split Tunnelling for VPN Connections

Ensure that devices accessing the organisation's network through VPN do not use split tunnelling for

Ensure Internet Access via Organisation's Gateway

Mobile devices and desktop computers access the internet via an organisation's internet gateway rath

Ensure Separation of Classified and Personal Data on Devices

Organisation devices must keep classified and personal data separate to protect classified informati

Enterprise Mobility

Block Privately Owned Devices From SECRET and TOP SECRET Systems

Personally owned mobile devices and desktop computers must never be used to access SECRET or TOP SEC

Seek Legal Advice for Personal Device Access

Consult lawyers before allowing personal devices to access organisation's systems or data to prevent

Enforce Data Separation on Personal Devices

Ensure work data and personal data are kept separate on employees' personal devices.

Prevent Storing Classified Data on Privately Owned Devices

Staff using their own phones, tablets or computers for work must be stopped from saving OFFICIAL: Se

Block Personal Devices Granting AI Agents Access to Sensitive Systems

Staff using their own phones or computers to reach OFFICIAL: Sensitive or PROTECTED systems must not

Mobile device management

Use Approved Platforms for Secure Mobile Access

Use only ASD-approved mobile platforms for accessing SECRET or TOP SECRET data.

Prevent Installation of Unapproved Mobile Apps

Mobile devices block users from installing apps that are not approved by the organisation.

Prevent Modifications to Security Settings on Mobile Devices

Mobile devices ensure users cannot change or disable security features once set up.

Enforce Policy with Evaluated Mobile Device Management

Use certified management solutions to ensure mobile devices follow security policies.

Ensure Timely Security Updates for Mobile Devices

Apply security updates to mobile devices immediately upon availability to prevent security breaches.

Establish Mobile Device Management Policies

Create and maintain policies to manage and control mobile devices within the organisation.

Use Approved Mobile Platforms for Sensitive Access

Mobile devices must use evaluated platforms for secure access to sensitive systems or data.

Restrictions on Mobile Device Removable Media

SECRET and TOP SECRET devices need ASD approval to use removable media.

Ensure Mobile Devices Operate in Supervised Mode

Mobile devices must be set to a supervised mode to maintain security controls.

Implement Remote Locate and Wipe for Mobile Security

Mobile devices should be set up to be located and wiped remotely to ensure security.

Ensure Mobile Devices Have Secure Lock Screens

Mobile devices must have secure password-protected screens to prevent unauthorized access.

Separate Organisational and Personal Mobile Data

Ensure mobile devices keep work and personal apps and data separate.

Configure Mobile Devices with Always On VPN

Ensure mobile devices have a VPN that is always active to protect data.

Prevent Data Transfer Over USB on Mobile Devices

Mobile devices must be set to stop data from being transferred via USB connections.

Mobile Device Management

Encrypt Storage on Mobile Devices

Mobile devices must use ASD-approved encryption for both internal and external storage.

Encrypt Sensitive Data Over Public Networks

Mobile devices must encrypt sensitive data sent over public networks using approved cryptography.

Mobile Apps Encrypt Sensitive Data Using ASD-Approved Cryptography

Mobile apps must encrypt all sensitive or classified data sent over public networks using cryptograp

Mobile device usage

Prevent Sensitive Data in Messaging Services

Do not send sensitive information using paging or messaging apps.

Disable Bluetooth on SECRET/TS Mobile Devices

Bluetooth must be turned off on mobile devices with SECRET or TOP SECRET information to prevent data

CISO Management of Cyber Security Personnel

The Chief Information Security Officer (CISO) manages cyber security staff in the organisation.

Using Cryptographic Sanitisation on Mobile Devices

Ensures cryptographic keys are erased on SECRET or TOP SECRET devices in emergencies.

Ensure Privacy While Viewing Data in Public

Don't look at sensitive data on mobile devices in public unless you can shield your screen from othe

Secure Storage and Handling of Mobile Devices

Ensure mobile devices are secure when not in use to prevent unauthorized access.

Supervise Mobile Devices During Active Use

Ensure mobile devices are watched carefully whenever they are in use to avoid loss or theft.

Develop and Maintain Mobile Device Usage Policy

Ensure a policy is in place to guide how mobile devices are used in the organisation.

Advise Personnel on Mobile Communication Sensitivity

Personnel are informed about what levels of classified communication are allowed on mobile devices.

Transporting Mobile Devices Securely

If you can't secure a mobile device, it must be carried in a security bag or similar for safe transp

Report Potential Compromises of Mobile Devices Overseas

Inform your employer immediately if your mobile device is compromised or shows unusual behaviour whi

Apply Privacy Filters to Protect Device Screens

Privacy filters help keep sensitive information on mobile screens private in public spaces.

Keep Mobile Devices Undiscoverable via Bluetooth

Bluetooth on mobile devices is only discoverable during pairing to protect sensitive information.

Secure Bluetooth Pairing for Mobile Devices

Ensure Bluetooth connections for devices are only made with intended, authorised equipment.

Remove Unnecessary Bluetooth Pairings on Devices

Remove Bluetooth pairings on certain mobile devices when they are no longer needed.

Secure Bluetooth Pairing for Mobile Devices

Use secure methods when pairing Bluetooth on sensitive mobile devices, like numeric comparison.

Advise Personnel on Overseas Mobile Device Security

Inform staff about privacy and security risks when taking mobile devices abroad.

Personnel Awareness for Secure Mobile Device Usage

This guideline advises on secure mobile device use to prevent data theft or compromise.

Mobile Device Security After Overseas Travel

Upon returning from overseas, clean your devices, reset any lost credentials, and report any securit

Guidelines for Using Mobile Devices Abroad

Use specific work devices and avoid personal phones when going to high-risk countries.

Prepare Mobile Devices Before Overseas Travel

Before travelling overseas, ensure mobile devices are recorded, updated, reduced to essentials, and

Security Measures After Overseas Travel with Mobile Devices

Reset credentials and watch for suspicious account activity after travel to high-risk areas.

Secure Communication Practices in Public Areas

Avoid discussing sensitive topics on mobile phones in public to prevent eavesdropping.

Prevent Connection of Mobile Devices to Infotainment

Do not link mobile phones to car infotainment systems.

Do Not View Classified Data on Mobile Devices

Avoid looking at sensitive information on your phone near connected cars.

Restrict Sensitive Conversations Near Vehicles

Sensitive phone calls should not be made near connected vehicles.

Back to the full Information Security Manual (ISM) control list, or browse the complete control library.