Lost or stolen devices
Accounts and accessComes in through: Devices
A forgotten laptop with the company inside
A laptop left on a train, a stolen phone or a lost USB stick can hold emails, documents and saved passwords. If they're not protected, whoever finds them has access to everything.
Threat mapHow it happens
- 1
The loss
A work device is lost or stolen, in or out of the office.
- 2
The access
Without encryption or a lock, it's easy to read the files and get into accounts that are still signed in.
- 3
The impact
Client data exposed, accounts used by others and, often, an obligation to report it.
How to spot it
- Laptops without encryption or a sign-in password
- Company phones without a screen lock
- Client documents copied to USB sticks
- You wouldn't know how to wipe a device remotely
How to protect yourself
- Encrypt laptops and lock every device
- Be able to locate and wipe a device remotely
- Avoid storing sensitive data on USB sticks
- Know who to tell and what to do if one is lost
If it has already happened
Report it straight away, change the passwords of the accounts used on that device and wipe it remotely if you can. If it held personal data, consider whether it must be reported.
How many of these risks does your company have right now?
Take the cybersecurity test and discover your exposure level in 3 minutes. You'll get your score with the highest-risk areas, no sign-up required.
Free · No sign-up · 3 minutes