Control: ism-1088; Revision: 5; Updated: Dec-21; Applicability: ALL; Essential Eight: N/A ​

Personnel report the potential compromise of mobile devices, removable media or credentials to their organisation as soon as possible, especially if they:

• provide credentials to foreign government officials
• decrypt mobile devices for foreign government officials
• have mobile devices taken out of sight by foreign government officials
• have mobile devices or removable media stolen that are later returned
• lose mobile devices or removable media that are later found
• observe unusual behaviour of mobile devices.