Mobile Security Policy Template

This policy is designed to help New Zealand SMBs manage mobile device usage while maintaining security and compliance.

1. Device Eligibility

• Company-owned or approved BYOD devices only
• Must support remote wipe and encryption

2. Authentication & Access

• All devices must require PIN/passcode or biometrics
• Enforce Multi-Factor Authentication for business apps

3. Data Management

• Use secure containers or sandboxing for business data
• Prevent copy/paste between personal and work profiles

4. Monitoring & Compliance

• All devices must be enrolled in the company’s MDM
• Inactive or non-compliant devices will be restricted

5. Employee Responsibilities

• Report loss/theft within 2 hours
• Do not store credentials or confidential data outside business apps
• Accept regular compliance checks