BUSINESS DEVICE ASSIGNMENT: KEEP TRACK OF THE DEVICES YOU TRUST
Business phones and computers can provide direct access to company accounts, information and applications.
Device assignment should therefore be part of access management rather than an informal handover.
1. IDENTIFY THE DEVICE
Record the device appropriately so the organization knows who is responsible for it.
Depending on the organization, this may include an asset identifier, device type and assigned user.
2. APPLY BASIC SECURITY CONTROLS
Use appropriate screen locking, updates, device protection and approved software.
The exact controls should reflect the device and business risk.
3. CONNECT ONLY WHAT IS NEEDED
Avoid installing unnecessary applications or granting unnecessary access to business systems.
4. EXPLAIN LOST-DEVICE PROCEDURES
Employees should know who to contact if a company device is lost or stolen and what immediate actions the organization may take.
5. REVIEW DEVICE ACCESS WHEN ROLES CHANGE
When a person changes role or leaves, review the devices and accounts assigned to them.
6. BUSINESS EXAMPLE
A company gives a new employee a laptop that is already signed into several business applications.
The organization should know which applications are present, which account controls the device and how access will be removed when the device is returned.
7. PRACTICAL CHECK
- Device assigned to a responsible person
- Security controls enabled
- Business applications identified
- Lost-device procedure understood
- Device return process defined
WHY THIS MATTERS
A device that is forgotten during onboarding or offboarding can become an overlooked path into business systems.
VERIFY BEFORE YOU TRUST.
Know which devices are trusted to access your business and who currently controls them.
