Every phone and laptop that touches your business is a door. Ten minutes a month keeps them locked.
Every device
Automatic updates on; screen lock with biometric or a 6-digit PIN; ‘find my device’ enabled; no software from cracks or unknown sites; a standard user account for daily work, the admin account only for installs.
Phones
Review app permissions quarterly (SMS, contacts, accessibility — remove from any app that is not your messaging app or a genuine accessibility tool). Uninstall apps you have not opened in three months. Never sideload APKs.
The shop / billing PC
No personal browsing or games on it; browser without saved card details; USB ports used only for known devices; antivirus on and updated; the Tally data folder in the daily backup.
When a device is lost
Remote-lock and wipe it; change the e-mail and banking passwords from another device; tell the bank if a banking app was installed; report the IMEI on Sanchar Saathi (CEIR) to block it.
Checklist
- ☐Updates automatic on every device
- ☐Screen lock + find-my-device on
- ☐No pirated software
- ☐Standard user for daily work
- ☐App permissions reviewed this quarter
- ☐Lost-device steps known by staff