DIM-05-01 Device Access Risks and Prevention

You use your device, smartphone, tablet, or computer to run applications and access internet services. These applications and internet services are working with your information and storing data. If you can access your applications and internet services, you can see your information and data.

How do you prevent someone else from accessing your device? There are a few points to consider:

• If the device is not with you, is it locked up and safe from being physically accessed by others?
• If the device is physically accessible to others, can others turn it on, and access your applications and data?
• If the device you use is a shared device, are the applications you use and the data you work with accessible to others when they use the device?
• Do the applications and internet services you use have their own security?

Physical device access

Physical security of a device is important. Devices, mobile devices in particular, can easily be lost or stolen. You need to ensure that if your device is stolen, access to your applications and internet services, as well as all your data is protected.

Device risk Prevention

• Physically secure devices when not in your possession
• Use ‘soft-lock’ features to secure your device when turned on, or inactive
• Use application specific security features where available
• Use operating system user accounts or profiles or shared devices