5.13.5—Mobile Device Incident Reporting
>Control Description
In addition to the requirements in Section 5.3 Incident Response, agencies shall develop additional or enhanced incident reporting and handling procedures to address mobile device operating scenarios. Rapid response to mobile device related incidents can significantly mitigate the risks associated with illicit data access either on the device itself or within online data resources associated with the device through an application or specialized interface.
Special reporting procedures for mobile devices shall apply in any of the following situations:
1. Loss of device control. For example:
a. Device known to be locked, minimal duration of loss
b. Device lock state unknown, minimal duration of loss
c. Device lock state unknown, extended duration of loss
d. Device known to be unlocked, more than momentary duration of loss
2. Total loss of device
3. Device compromise
4. Device loss or compromise outside the United States
>Cross-Framework Mappings
Ask AI
Configure your API key to use AI features.