Skip to main content
U.S. flag

An official website of the United States government

Dot gov

The .gov means it’s official.
Federal government websites often end in .gov or .mil. Before sharing sensitive information, make sure you’re on a federal government site.


The site is secure.
The https:// ensures that you are connecting to the official website and that any information you provide is encrypted and transmitted securely.

Guidelines for Managing the Security of Mobile Devices in the Enterprise



Murugiah P. Souppaya, Karen Scarfone


Mobile devices, such as smart phones and tablets, typically need to support multiple security objectives: confidentiality, integrity, and availability. To achieve these objectives, mobile devices should be secured against a variety of threats. The purpose of this publication is to help organizations centrally manage the security of mobile devices. Laptops are out of the scope of this publication, as are mobile devices with minimal computing capability, such as basic cell phones. This publication provides recommendations for selecting, implementing, and using centralized management technologies, and it explains the security concerns inherent in mobile device use and provides recommendations for securing mobile devices throughout their life cycles. The scope of this publication includes securing both organization-provided and personally-owned (bring your own device, BYOD) mobile devices. [Supersedes SP 800-124 (October 2008):]
Special Publication (NIST SP) - 800-124 Rev 1
Report Number
800-124 Rev 1


cell phone security, information security, mobile device security, mobility, remote access, smartphone security, tablet security, telework
Created June 21, 2013, Updated June 9, 2020