Purpose
This Knowledge Base Article outlines the standard operating procedure (SOP) for employees who lose or have their laptop or cell phone stolen. The purpose of this SOP is to minimize the security risk and potential data breach that may result from the loss or theft of these devices.
Scope
This SOP applies to all BMIT's client's employees who use a laptop or cell phone that is owned by our client or contains our client's company data. This includes devices that are used for work purposes, such as accessing email, cloud services, or online accounts.
Procedure
If an employee loses or has their laptop or cell phone stolen, they will need to follow these steps:
1.
Report the incident to their supervisor and BMIT's help desk (
support@bostonmit.com) as soon as possible. Provide details such as the device model, serial number, location and time of the loss or theft, and any other relevant information.
2. Change passwords for all online accounts that are accessible from the device, such as email, cloud services, social media, and e-commerce. Use strong and unique passwords for each account and enable two-factor authentication (2FA) if available.
3. Clear autofill from the web browsers that are installed on the device. Turn off automatic sign-in options and delete saved passwords and payment information. Sign out of any online services that are synchronized with the device, such as Google, Apple, Microsoft, Amazon, and Facebook.
4. Deauthorize the device from any online services that allow you to manage your devices remotely, such as Find My iPhone, Google Find My Device, Microsoft Find My Device, or Intune. This will prevent unauthorized access to your data and services from the device.
5. Track the device if it has a tracking capability, such as GPS, Bluetooth, or Wi-Fi. Use an app or service that can locate your device on a map, such as Find My iPhone, Google Find My Device, Microsoft Find My Device, or Intune. If you can safely recover the device, do so. If retrieving the device could be dangerous, notify the police of the location.
6. BMIT will wipe the device. This will erase all data and settings from the device and make it unusable.
7. File a police report if the device was stolen or if it contains sensitive or confidential data. Provide a copy of the report to your supervisor and the BMIT support team (support@bostonmit.com.)