Skip to main content

Why Domains How it works Platform Frameworks ELSA By role Use Cases

Request demo →

Why Domains How it works Platform Frameworks ELSA By role Use Cases Request demo →

Checklist · Response

Lost or stolen device

The steps for a laptop or phone that has gone missing, for the owner and for IT.

Owner: Device owner, then ITTime: 30 min

0 of 16

The owner

Report it to IT or the security team the same day, even outside working hours; do not wait to see if it turns up.
Say when and where it was last seen, and whether it was locked or in use.
Report theft to the police and get the reference, where it applies.
Do not try to track it down alone.

IT: act first

Lock the device through device management, and wipe it if it is not recovered quickly or holds sensitive data.
Confirm whether the disk was encrypted and the screen was locked; record it.
Revoke the user's sessions and tokens, and remove the device from MFA and from certificate or VPN trust.
Reset the user's password and any shared secrets stored on the device.
Disable the device's certificates and any API keys or SSH keys stored on it.

IT: assess

List what was on the device: synced files, saved passwords, cached email, customer data.
Check the sign-in logs for use of the account since the loss.
Decide whether personal data may have been exposed, and if so start the breach assessment with legal.
Update the asset inventory, and issue a replacement from the standard image.

Afterwards

If the device is recovered, do not return it to use without a re-image.
Record the cause (car, travel, café) and use it in awareness material.
Check the encryption rate across the fleet, because the next loss is only harmless if every disk is encrypted.

Adjust it to your environment before relying on it. A finished list shows a routine was followed; it does not guarantee nothing was missed.

See these as tasks in Cisodium All checklists

Ready to move
beyond legacy GRC?

14-day free trial. No credit card. Cloud or on-premises.

Request demo Talk to sales →

The cyber GRC platform (ISMP) that goes beyond legacy GRC. Built on 15+ years of security expertise.

Product

Why beyond GRC
Domains
Platform
ELSA AI

Platform

How it works
FAQ
By role
Use cases
ROI calculator
Maturity quiz
Checklists

Contact

Request demo
sales@cisodium.com
support@cisodium.com

© 2020–2026 CISODIUM OÜ. All rights reserved.

We use cookies to analyze site usage and improve your experience. By clicking "Accept", you consent to analytics cookies.Privacy Policy