P-29 Mobile Device Policy
File Reference : P-29 Mobile Device Policy
Date File Updated 28-09-26
File Format MS Word
No. of files 1
Category Policies
Tags: ISO 27001, mobile devices, laptops, phones, tablets, Cyber Essentials
  • £2.50

  or  

Login to Download


A mobile device policy template setting out the rules for company laptops, tablets and phones, and the limits on using personal devices for work.

Effective Policy Templates

This policy template is supplied in fully editable MS Word format and can be easily customised and edited. The document uses pre-defined style formatting throughout, with all text in Calibri font for improved readability.
The following document labelling is included in the footer:

  • Policy number and title
  • Information-classification
  • Version
  • Page number / total pages
alphaZ documents - beautifully designed, tried and tested policy templates. No junk, jargon or unnecessary content. Simple and usable policy templates developed over 25 years through practical use in the real world.
Document Preparation
Logo Update Service *

Download this policy template with your company name and logo already added!
Document Preparation available with all document toolkits.

How to Download

To get access to this file please click on Add to Cart to purchase for immediate download. If you have an alphaZ Subscription just click on Download Files to view all the files available to download. This policy is also included in the ISO 27001 Toolkit and every alphaZ ISO toolkit that covers ISO 27001, so the toolkit route gives you this file plus everything else you need in one download.

Implementation Support
Need Help Implementing?

If you'd like this policy prepared for your organisation along with the rest of your company policies, or help with your information security risk assessment and treatment plan, our remote support services provide direct expert input from our team, by the day, by project, or on an ongoing basis.

File Formats

Mobile Device Policy Template

A mobile device policy template defining the standards, procedures and restrictions for company-supplied devices, and the limits on using personally owned devices for work purposes.

The policy has Approved By and Date Approved fields and carries a Public information classification, so it can be shared with workers, clients and other interested parties.

What the Mobile Device Policy Covers

  • Scope - laptops, notebooks and tablets, mobile phones and smartphones, and any mobile device that stores data and connects to a network
  • Registration - devices registered and approved before first use on the network
  • Passwords - devices protected by a strong password, with reference to the password policy
  • Applications and security software - no unapproved applications, security software installed, and applications kept up to date
  • Physical security - reasonable measures to protect devices
  • Loss, theft and incidents - reported immediately so access can be blocked and, where possible, the device wiped remotely
  • Personal use - limited personal use of company devices where it does not breach other policies
  • Retention - information deleted from devices when no longer required
  • Personal devices - not used for business purposes or for personal, operational or confidential information
  • Enforcement - the consequences of not following the policy

Checked Against Cyber Essentials

The IT policies in the range have been checked against the Cyber Essentials requirements, so their rules on passwords, devices, access and updates do not contradict what a Cyber Essentials assessment asks for.

Using the Policy

Add your company name and logo, check each commitment matches what your organisation does and edit any that do not, then approve and date the policy and share it with workers and anyone else who needs to see it.

Who Needs a Mobile Device Policy?

Any organisation that issues laptops, tablets or phones to its workers, and organisations working to ISO 27001 or applying for Cyber Essentials.

Included in the ISO 27001 Toolkit

This policy is part of the ISO 27001 Toolkit and every alphaZ ISO toolkit that covers ISO 27001.

Works with the Information Security Policy Procedure

The same policy is included as the Mobile Device Policy section of the PP-8-100 Information Security Policy Procedure, which is complete without the standalone file. This standalone policy is for organisations that want it as a separate document they can share.

Document Control

The footer carries the policy number and title, information classification, version and page numbers, and the approval fields record who approved the policy and when, so it can be controlled with the rest of your management system documents and listed on a document register such as the F-IMS20 Document Register.

Related Policies

Would you rather we prepared it for you?

Our Company Forms, Policies and HR Reset service prepares your policy set, staff handbook and HR forms as one branded set, tailored to how you actually run things.

Company Forms, Policies and HR Reset

There are currently no comments for this document.

Add a Comment

Please Login or Subscribe to add Comments.