What should we do when a work laptop is lost or stolen?

Act on the accounts first, then the device. On the same day: end the user's active sessions and change the password, check that multi-factor authentication is still bound to the user's own phone, revoke the laptop's VPN certificate or access, and, if you use device management, lock or wipe it remotely. If the disk was encrypted and the laptop was locked, the data is very likely safe; if not, assume it can be read and check whether personal data is involved, because a personal-data breach may have to be reported under the GDPRGDPR: General Data Protection Regulation. The EU data protection law (Regulation (EU) 2016/679)., so involve your data protection officer the same day. Report a theft to the police and keep the reference for your insurer. Then check whether the device has connected since: the NetSenX network map shows when a device was last seen on a monitored segment, and for a laptop with the agent the dashboard shows when it last reported. A network tool cannot locate or wipe the laptop.

← All 40 questions on Remote work and exposed servicesAll topics