Skip to main content
U.S. flag

An official website of the United States government

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

Guidelines for Managing the Security of Mobile Devices in the Enterprise



Murugiah Souppaya, Gema Howell, Karen Scarfone, Joshua Franklin, Vincent Sritapan


Mobile devices were initially personal consumer communication devices, but they are now permanent fixtures in enterprises and are used to access modern networks and systems to process sensitive data. This publication assists organizations in managing and securing these devices by describing available technologies and strategies. Security concerns inherent to the usage of mobile devices are explored alongside mitigations and countermeasures. Recommendations are provided for the deployment, use, and disposal of devices throughout the mobile-device life cycle. The scope of this publication includes mobile devices, centralized device management, and endpoint protection technologies, as well as both organization-provided and personally owned deployment scenarios.
Special Publication (NIST SP) - 800-124r2
Report Number


enterprise mobility management (EMM), mobile, mobile application vetting (MAV), mobile device management (MDM), mobile security, mobile threat defense (MTD), tablets.


Souppaya, M. , Howell, G. , Scarfone, K. , Franklin, J. and Sritapan, V. (2023), Guidelines for Managing the Security of Mobile Devices in the Enterprise, Special Publication (NIST SP), National Institute of Standards and Technology, Gaithersburg, MD, [online],, (Accessed June 21, 2024)


If you have any questions about this publication or are having problems accessing it, please contact

Created May 17, 2023