Blog Details

A sales manager takes a cab back from a client meeting. The laptop stays on the back seat. What happens next depends entirely on what was set up before that day. Phones and laptops carry email, Teams, client WhatsApp groups and saved passwords, so a lost device can be a hardware cost or a data breach. This guide covers the settings that decide which.

Laptops: encryption and remote control

Without protection, anyone who finds the laptop can remove the drive and read the files: client lists, quotes, saved passwords. With protection:

• BitLocker encryption: the drive is unreadable without the user’s sign-in.
• Device management with Microsoft Intune: IT can locate, lock or wipe the laptop remotely.
• Files in OneDrive: the work is safe and back on a new laptop the same day.
• Quick action: the user’s sessions are signed out and the password reset.

The lost laptop becomes a hardware cost, not a data breach.

Phones: four basics for every staff phone

• Lock: a PIN of six digits or more, plus fingerprint or face unlock.
• Update: install system and app updates when they arrive.
• Back up: so a lost phone is an inconvenience, not a disaster.
• Find: turn on Find My on iPhone or Find My Device on Android, so the phone can be located or wiped.

For company data on personal phones, Microsoft Intune can protect work apps and wipe only the work data, leaving personal photos and apps alone.

What to do in the first hour after a loss

1. Tell IT immediately, even if you think the device might turn up.
2. Locate or lock it remotely.
3. Sign the user out of all sessions and reset their password.
4. If it isn’t recovered, wipe it.
5. Record what happened, what data was on it, and when it was wiped. If the device held personal data and wasn’t encrypted, check with your legal adviser whether it counts as a personal data breach under India’s DPDP Rules.