Staying compliant and secure: The importance of up-to-date device management

As an organization in the EU or an organization processing data of people from the EU, you're required to comply with the General Data Protection Regulation (GDPR). But what is the connection between up-to-date devices and GDPR compliance, especially if you already store data separately or have them backed up?

The regulatory landscape: GDPR and beyond

The GDPR requires that devices be "up to date". This means:

• For iOS devices: The current version of the operating system must be installed.
• For Android devices: The latest patch level must be maintained.
• For Windows and macOS systems: Regular patching is essential.

Moreover, apps and programs need to be updated regularly on your devices. Miradore provides support here with relevant configuration profiles for iOS and Android, as well as patch management for 120 (Windows) and 80 (macOS) software manufacturers. Those rules have now been tightened by the NIS2 (Network and Information Security) Directive.

Devices and apps are updated not only to raise the security level, but also to boost efficiency. So, what's the best approach?

Solutions for effective device management

Fortunately, many of these issues are easy to solve without any extra costs:

1. The right setup
   1. Activate the relevant configuration profiles and patch settings
   2. Manage ALL your devices
   3. Never leave your devices switched off for long periods of time, otherwise updates to the systems can't be installed.
2. The right selection
   1. Choose devices that guarantee long update cycles (e.g., Apple offers 5 years and Google 7 years for the Pixel series – similarly to Samsung for Enterprise Edition devices)
   2. Choose apps that are covered by patch management or have an automated update mechanism (such as Apple Volume Purchase Program apps).
3. Regular monitoring
   1. Are all devices online? Has a device been offline for longer than 7 days? In that case, action needs to be taken.
   2. Are all devices registered in the system? In some cases, devices that have been purchased or are used by other departments may not have been registered. That is known as "shadow IT". A (security) chain is only as strong as its weakest link.

Staying on top of device management is not just good practice—it's essential for business continuity and compliance. Alarming figures published online suggest that some 60% of SMEs go insolvent after cyberattacks, while 87% find themselves on the brink of insolvency. With the steps outlined above and the help of Miradore, you can significantly minimize risks, ensure compliance, and maintain a secure IT environment for your organization.