[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"framework:nist-sp\u002F800-124":3},{"item":4,"lessons":16,"controls":66,"related":96},{"family":5,"item":6,"code":7,"title":8,"citations":9,"publisher":10,"summary_md":11,"official_text":12,"official_attribution":12,"official_url":13,"link_label":14,"note":12,"updated_at":15},"nist-sp","800-124","SP 800-124","SP 800-124 Rev. 2: Guidelines for Managing the Security of Mobile Devices in the Enterprise",110,"US National Institute of Standards and Technology (NIST)","**What it covers.** NIST guidance on securing smartphones and tablets used for work, whether organisation-owned or personally owned. It describes mobile threats and the technologies available to manage them, such as enterprise mobility management, mobile threat defence and application vetting.\n\n**In practice.** Applying it well means defining which devices and deployment models are allowed, enrolling devices in management, and enforcing baseline settings such as screen lock, encryption and current operating system versions. Organisations separate work data from personal data where devices are personally owned and can wipe work data on loss. Evidence includes a mobile policy, enrolment statistics, compliance reports and processes for lost devices.\n\n**Common gaps.** Typical gaps are unmanaged personal devices accessing email and files, outdated operating systems that can no longer be patched, and no control over risky apps.",null,"https:\u002F\u002Fcsrc.nist.gov\u002Fpublications\u002Fsp800","Find it among NIST SP 800 publications","2026-10-18T15:18:43.663+00:00",{"total":9,"list":17},[18,22,26,30,34,38,42,46,50,54,58,62],{"slug":19,"title":20,"published_at":21},"zero-click-spyware-delivered-via-ad-networks-targets-journalists","Zero-Click Spyware Delivered via Ad Networks Targets Journalists","2026-10-15T12:21:25.749+00:00",{"slug":23,"title":24,"published_at":25},"android-rat-hirudo-swaps-legitimate-banking-apps-with-trojanized-clones","Android RAT 'Hirudo' Swaps Legitimate Banking Apps with Trojanized Clones","2026-10-15T12:21:08.907+00:00",{"slug":27,"title":28,"published_at":29},"hirudo-malware-swaps-banking-apps-to-steal-credentials-and-bypass-security","Hirudo Malware Swaps Banking Apps to Steal Credentials and Bypass Security","2026-10-14T13:20:20.786+00:00",{"slug":31,"title":32,"published_at":33},"hirudo-trojan-replaces-legitimate-banking-apps-to-steal-credentials","Hirudo Trojan Replaces Legitimate Banking Apps to Steal Credentials","2026-10-14T12:20:48.409+00:00",{"slug":35,"title":36,"published_at":37},"preinstalled-malware-on-budget-android-phones-turns-devices-into-proxy-bots","Preinstalled Malware on Budget Android Phones Turns Devices Into Proxy Bots","2026-10-13T08:20:19.126+00:00",{"slug":39,"title":40,"published_at":41},"p7-darksword-ios-exploit-kit-targets-crypto-wallets-and-keychain-data","P7 DarkSword iOS Exploit Kit Targets Crypto Wallets and Keychain Data","2026-10-09T18:20:57.498+00:00",{"slug":43,"title":44,"published_at":45},"fully-patched-pixel-10-hacked-remotely-at-pwn2own-via-chained-exploits","Fully Patched Pixel 10 Hacked Remotely at Pwn2Own via Chained Exploits","2026-10-09T10:21:50.354+00:00",{"slug":47,"title":48,"published_at":49},"firmware-level-malware-pre-installed-on-budget-android-devices-worldwide","Firmware-Level Malware Pre-Installed on Budget Android Devices Worldwide","2026-10-09T10:20:27.189+00:00",{"slug":51,"title":52,"published_at":53},"pwn2own-exposes-critical-remote-exploits-in-google-pixel-10","Pwn2Own Exposes Critical Remote Exploits in Google Pixel 10","2026-10-09T08:21:12.768+00:00",{"slug":55,"title":56,"published_at":57},"pre-installed-malware-in-low-cost-android-firmware-highlights-supply-chain-risk","Pre-Installed Malware in Low-Cost Android Firmware Highlights Supply Chain Risk","2026-10-08T20:20:42.159+00:00",{"slug":59,"title":60,"published_at":61},"firmware-level-malware-preinstalled-on-budget-android-devices","Firmware-Level Malware Preinstalled on Budget Android Devices","2026-10-08T16:20:21.318+00:00",{"slug":63,"title":64,"published_at":65},"samsung-galaxy-s26-hacked-three-times-at-pwn2own-ireland-via-zero-day-exploits","Samsung Galaxy S26 Hacked Three Times at Pwn2Own Ireland via Zero-Day Exploits","2026-10-08T08:20:53.595+00:00",[67,72,77,82,87,91],{"slug":68,"name":69,"problem":70,"stories":71},"endpoint-detection-response","Endpoint detection and response (EDR and XDR)","Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.",67,{"slug":73,"name":74,"problem":75,"stories":76},"endpoint-management","Device management (MDM and UEM)","Every company laptop and phone is known, encrypted, locked down and up to date.",49,{"slug":78,"name":79,"problem":80,"stories":81},"security-awareness-training","Security awareness training and phishing simulation","People recognise and report attacks instead of falling for them.",26,{"slug":83,"name":84,"problem":85,"stories":86},"patch-management","Automated patch management","Known holes get closed in days, not months.",25,{"slug":88,"name":89,"problem":90,"stories":86},"email-security","Email security","Phishing, malware and invoice fraud are filtered out before they reach inboxes.",{"slug":92,"name":93,"problem":94,"stories":95},"threat-intelligence","Threat intelligence","Attack campaigns reach your sector, suppliers or software before your team hears about them.",20,[97,103,109,114,119,124,129,134],{"family":98,"item":99,"code":100,"title":101,"together":102},"gdpr","32","Article 32","Security of processing",63,{"family":104,"item":105,"code":106,"title":107,"together":108},"cis","4","Control 4","Secure Configuration of Enterprise Assets and Software",56,{"family":104,"item":110,"code":111,"title":112,"together":113},"7","Control 7","Continuous Vulnerability Management",48,{"family":104,"item":115,"code":116,"title":117,"together":118},"2","Control 2","Inventory and Control of Software Assets",45,{"family":104,"item":120,"code":121,"title":122,"together":123},"14","Control 14","Security Awareness and Skills Training",34,{"family":125,"item":126,"code":127,"title":127,"together":128},"itil","overview","ITIL",31,{"family":130,"item":131,"code":132,"title":133,"together":128},"nist-800-53","si-3","SI-3","Malicious Code Protection",{"family":135,"item":135,"code":136,"title":137,"together":138},"owasp","OWASP","OWASP (Open Worldwide Application Security Project)",27]