A lost or stolen device contains locally saved confidential files.
A lost or stolen phone allows access to a company platform or system that contains confidential files.
A lost or stolen device is logged in to a platform that provides access to confidential files in cloud storage.
A lost or stolen phone is used as an MFA authenticator for access to platforms containing confidential files.
Licensee communicates embargo dates, including time zone, to any customer receiving assets, and requires confirmation of understanding.
Licensee restricts product asset release to latest possible timing to meet customer need.
Licensee tiers product asset release to retail in accordance with ability to hold for a go-live time/date.
Licensor and License change embargo dates only within a window of time agreed to as actionable by customer.Retail customers with global content systems ensure assets can be centrally managed to embargo date at regional/local level before being granted access to embargoed assets.
Retail customer secure storage and restricted access for embargoed assets during staging process.
BEST PRACTICES
Banner notifications on phone/tablet devices should be disabled or displayedwithout preview for all communication apps so messages are not readable on locked screens.
Install software that allows for a connected device to be remotely disabled until a recovery key is entered on devices that will hold or allow system access to sensitive IP.
Conduct “baseline checks”with staff issued company devices to ensure all devices are accounted for and to remind staff of their obligations to secure them.
Systems containing confidential IP should require individual accounts that can be monitored for unusual activity and failed login attempts.
All company-owned devices used to access or house confidential files should be logged centrally, so that their exposure potential can be quickly determined if they are lost/stolen.
Feedback
Seek input and feedback from the community to enhance and address known risks. Leverage industry experts and experience for industry wide knowledge sharing