Secordit home
Contact

What is mobile device management (MDM)?

Mobile device management, or MDM, is workplace software used to set security rules on phones, tablets and similar devices. It can require a lock, control which apps can be installed, send updates or policies, and remotely wipe a lost device. In this glossary, MDM means that workplace tool, not a medical term and not a consumer parental-control product. 12

By Secordit. Last checked: 10 November 2026.

Go to the steps · All glossary terms

How it works

  1. An organisation chooses MDM software and sets rules for work phones, tablets, or personal devices used for work. 12
  2. Those rules can include a device lock, app controls, updates or policies, and a remote wipe if a device is lost. 1
  3. If staff use personal phones for email or files, that is a policy and consent issue as well as a technical one. 1

How it can look

The NCSC device-security guidance has a dedicated MDM chapter for organisations getting ready to manage devices. Its 10 Steps architecture guidance also mentions MDM as a configuration-management tool. Families may meet the term when a work profile appears on a personal phone. 12

Warning signs

  • Work email or files are used on a personal phone with no agreed policy, and no discussion of what the organisation can manage. 1
  • A lost work phone has no lock, and no way for the organisation to wipe it. 1
  • MDM is talked about as if it were antivirus, or as if it were a household parental-control product. 1

What to do now

  1. If you run a small organisation, read the NCSC MDM chapter before you manage staff devices, including personal phones used for work. 1
  2. Agree the policy and the consent position with staff before a work profile is added to a personal phone. 1
  3. If your work has put MDM on your personal phone, ask your employer what the product and policy allow. What a given employer can see depends on the product and the policy. 1

UK reporting and support

  • If a work or personal account has been taken over, follow the NCSC help for a hacked account. 3
  • For fraud or hacking in England, Wales or Northern Ireland, use Report Fraud. In Scotland, call Police Scotland on 101. 456
  • If a device is lost and may expose work data, tell your employer as well. 1
  • If someone is in danger, call 999. 56

How to protect yourself

  • Use a device lock, and keep work devices, or work profiles, under the organisation's agreed rules. 1
  • Apply updates, which MDM can help an organisation send. 12
  • Keep personal and work use clearly agreed if a personal phone is used for work email or files. 1

Frequently asked questions

My work has put MDM on my personal phone. What does that actually allow them to see?

That depends on the product and the policy. Ask your organisation what the chosen tool is set to manage, and what was agreed with you. 1

Is MDM the same as antivirus?

No. MDM is a workplace tool for setting and enforcing device rules. It is also not a consumer parental-control product, though families may see a work profile on a personal phone. 1

Does MDM only apply to company-owned phones?

No. It can also be used when personal devices are used for work. That is a policy and consent issue as well as a technical one. 1

Matching kit

First Hour After a Breach · £29 · Digital download.

An incident-response planning kit for UK small businesses. It is not a live incident-response or legal service.

General information, not legal, financial or personalised security advice. Secordit is not a police or bank reporting service.

News Pulse

Account security, explained by email.

Read about News Pulse

Sources

  1. NCSC, Mobile device management | National Cyber Security Centre. Accessed 10 November 2026 (Europe/London).
  2. NCSC, 10 Steps: Architecture and configuration | National Cyber Security Centre. Accessed 10 November 2026 (Europe/London).
  3. NCSC, Help for individuals | National Cyber Security Centre. Accessed 10 November 2026 (Europe/London).
  4. Report Fraud, Report Fraud. Accessed 10 November 2026 (Europe/London).
  5. Police Scotland, How to report a crime - Police Scotland. Accessed 10 November 2026 (Europe/London).
  6. Report Fraud, Reporting cyber crime and fraud or phishing attempts - Report Fraud. Accessed 10 November 2026 (Europe/London).