Security Glossary

Mobile Device Management (MDM)

A solution or software that allows an organization to remotely manage and secure mobile devices (like smartphones and tablets) used by its employees.

‍

With MDM, an admin can enforce security policies on devices - for example: require a PIN or biometric unlock, enforce encryption on the device, push configurations (like Wi-Fi or email settings), and remotely lock or wipe a device if it's lost or stolen. MDM often also allows separating work data from personal data on BYO devices (creating a "work profile" that the company controls).

‍

For SMBs, using an MDM might sound complex, but many services (including Microsoft 365's Intune or Google's Android Enterprise) make basic mobile management pretty straightforward.

‍

If your team is using phones for work email or Slack, MDM gives peace of mind that if someone's phone is left in a café, you can protect the business info on it by erasing the work data or disabling the device's access to company services. It also helps ensure consistency: e.g., you can ensure all devices have at least a 6-digit PIN and auto-wipe after 10 failed attempts, rather than relying on each user to set that up.

‍

Overall, MDM is about extending your security reach to mobile endpoints - because those tiny computers in our pockets can be gateways to a lot of sensitive material, and thus need oversight just like PCs do.