Aller au contenu principal

Pourquoi Domaines Fonctionnement Plateforme Référentiels ELSA Par rôle Cas d'usage

Demander une démo →

Pourquoi Domaines Fonctionnement Plateforme Référentiels ELSA Par rôle Cas d'usage Demander une démo →

Checklist · Response

Lost or stolen device

The steps for a laptop or phone that has gone missing, for the owner and for IT.

Owner: Device owner, then ITTime: 30 min

0 of 16

The owner

Report it to IT or the security team the same day, even outside working hours; do not wait to see if it turns up.
Say when and where it was last seen, and whether it was locked or in use.
Report theft to the police and get the reference, where it applies.
Do not try to track it down alone.

IT: act first

Lock the device through device management, and wipe it if it is not recovered quickly or holds sensitive data.
Confirm whether the disk was encrypted and the screen was locked; record it.
Revoke the user's sessions and tokens, and remove the device from MFA and from certificate or VPN trust.
Reset the user's password and any shared secrets stored on the device.
Disable the device's certificates and any API keys or SSH keys stored on it.

IT: assess

List what was on the device: synced files, saved passwords, cached email, customer data.
Check the sign-in logs for use of the account since the loss.
Decide whether personal data may have been exposed, and if so start the breach assessment with legal.
Update the asset inventory, and issue a replacement from the standard image.

Afterwards

If the device is recovered, do not return it to use without a re-image.
Record the cause (car, travel, café) and use it in awareness material.
Check the encryption rate across the fleet, because the next loss is only harmless if every disk is encrypted.

Adjust it to your environment before relying on it. A finished list shows a routine was followed; it does not guarantee nothing was missed.

See these as tasks in Cisodium All checklists

Prêt à aller
au-delà du GRC classique ?

Essai gratuit de 14 jours. Sans carte bancaire. Cloud ou on-premises.

Demander une démo Parler aux ventes →

La plateforme cyber GRC (ISMP) qui va au-delà du GRC classique. Bâtie sur 15+ ans d'expertise en sécurité.

Produit

Pourquoi au-delà du GRC
Domaines
Plateforme
ELSA AI

Plateforme

Fonctionnement
FAQ
Par rôle
Cas d'usage
Calculateur ROI
Quiz de maturité
Checklists

Contact

Demander une démo
sales@cisodium.com
support@cisodium.com

© 2020–2026 CISODIUM OÜ. Tous droits réservés.

Confidentialité Conditions

We use cookies to analyze site usage and improve your experience. By clicking "Accept", you consent to analytics cookies.Privacy Policy