IT & Cloud
Mobile device management
Company phones and tablets managed with the same care as your laptops and desktops, enrolled in Microsoft Intune, secured by policy, kept up to date, and wiped remotely if they go missing.
Who it is for
Businesses in Teesside and the North East whose staff reach company email, files and customer records from a phone or tablet: field engineers, drivers, sales people, directors, and anyone who has ever read work email on a personal phone. Also any business whose insurer or Cyber Essentials assessor has asked how mobile devices are controlled.
What you get
Every company phone and tablet enrolled in Microsoft Intune and held to the same policy as your computers: a passcode and encryption enforced, operating system and app updates kept current, company data separated from personal apps, and a lost or stolen device locked or wiped remotely within minutes of the call. New devices arrive set up, and leavers' devices are closed off the same day.
The problem
Phones and tablets reach the same company and client data as your computers, but they are often left out of IT management, which makes them the easiest way in.
A laptop that has never been patched is a risk everyone recognises. A phone that reads the same mailbox, opens the same SharePoint files and holds the same customer contacts is usually treated as the employee's own business, until it is left in a taxi, sold on with the work email still signed in, or kept by someone who has left. Nobody can say which devices hold company data, which operating system version they run, or how to remove the data without the device in hand.
Mobile device management puts phones and tablets under the same control as the rest of the estate. Microsoft Intune, which many businesses already license as part of Microsoft 365, enrols the device, enforces a passcode, encryption and an up-to-date operating system, installs the apps the business needs, and keeps company data in a managed area that can be wiped without touching personal photos. A device that does not meet the policy cannot reach company data until it does.
It also covers joiners and leavers: a joiner gets a phone that is ready on day one, and a leaver's access is removed centrally the day they go, with the company data gone from the device whether or not the device comes back.
What Odyssey provides
- Android and iOS phones and tablets enrolled and managed, built around Microsoft Intune
- Security and compliance policies enforced on every device, with company data separated from personal apps on personal phones
- Operating system and app updates kept current across the fleet, and a device that falls behind blocked until it catches up
- The apps your business needs installed and configured automatically, from email to line-of-business tools
- Lost or stolen devices located, locked or wiped remotely, and leavers' devices closed off the same day
- Reporting on which devices exist, who has them, and which are out of policy
What is included
| Included | Detail |
|---|---|
| Enrolment | New and existing company devices brought under management, and personal devices used for work enrolled with company data in a managed area |
| Policies | Passcode, encryption, minimum operating system version, app restrictions and compliance rules set and maintained to an agreed standard |
| Apps | Email, Teams, Office and your line-of-business apps deployed and configured automatically |
| Updates | Operating system and app updates kept current across the fleet, with devices that fall behind blocked from company data until they comply |
| Lost devices | Remote locate, lock and wipe, of the whole device or of company data only, on a call to our service desk |
| Joiners and leavers | Devices set up for new starters and access removed for leavers, with company data wiped remotely |
| Reporting | The device inventory, who holds what and which devices are out of policy, available on request |
| Mobile threat defence | Microsoft Defender, included with Microsoft 365 Business Premium, gives phishing and malicious website protection on iOS and Android and malware scanning on Android, and a compromised phone loses access to company data |
Not included, or sold separately
- The phones and SIMs themselves
- Handsets and mobile data plans are supplied through business mobile phones and SIM cards, a separate service
- Laptops and desktops
- Windows devices are enrolled in Intune under Complete managed IT or co-managed IT, where the same policies apply
- Personal devices the owner will not enrol
- A phone that is not under management cannot reach company data, and that is the policy rather than a gap
- Repairs and replacements
- A broken device is replaced through the mobile phone service; management covers the data on it, not the hardware
How it is delivered
-
List the devices
Every company phone and tablet, and every personal device that reads company email or files, with who holds it and what it reaches. The list is usually longer than anyone expected.
-
Agree the policy
Passcode and encryption rules, the minimum operating system, which apps are required and which are blocked, and what happens on a personal device: company data in a managed area, personal apps untouched.
-
Enrol
Company devices enrolled through Intune with the apps installed automatically; staff with personal devices enrol them with a short set of instructions, and anything not enrolled by the agreed date loses access to company data until it is.
-
Run the fleet
Updates and policy kept current, new starters' devices set up before day one, leavers closed off the same day, and a lost device locked or wiped on a call to the service desk.
-
Report
The inventory, who holds what and which devices are out of policy, available whenever an insurer, an auditor or a Cyber Essentials assessor asks.
Why trust Odyssey with this
-
ISO
Certified to ISO 27001 for information security
-
In-house
All work completed by Odyssey employees, never subcontracted
-
3
Calls answered within three rings, and a director is always reachable
- Odyssey is a Microsoft partner
Questions people ask
Which devices can you manage?
Android and iOS phones and tablets, company owned or personal devices used for work, managed through Microsoft Intune. Windows laptops and desktops are enrolled in the same Intune tenant under our managed IT services, so one set of policies covers the lot.
What happens if a phone is lost or stolen?
Call our service desk and a person answers within three rings. We locate the device if it is online, lock it, and wipe the company data or the whole device, so client and business information does not go with it.
Can staff use their own phones for work?
Yes, if they enrol them. Company email, files and apps sit in a managed area that we can wipe without touching personal photos or messages, and the device must meet the passcode and update policy to reach company data.
Why do phones and tablets need managing?
They reach the same company and client data as your computers, but they are usually left out of IT management, which makes them the easiest way in and the easiest way for data to leave with a leaver or a lost device.
Do we need extra licences?
Intune is included in many Microsoft 365 business and enterprise plans. We check what your users already hold during the licence review and tell you if anything extra is needed before anything is enrolled.
What happens when someone leaves?
Their access is removed centrally the day they go and the company data on the device is wiped remotely, whether or not the phone comes back. Shared logins they used stay with the business if you also run our password management.
Can you manage phones alongside our laptops and computers?
Yes. Mobile device management works alongside Complete managed IT and co-managed IT, so phones and tablets get the same care, policies and reporting as the computers, laptops and servers we look after.
Will this satisfy Cyber Essentials and our insurer?
Mobile devices that reach company data are in scope for Cyber Essentials, and insurers increasingly ask how they are controlled. Enrolment, enforced passcodes, encryption and current updates are the controls they look for, and the inventory report is the evidence.
Challenges this helps with
Related services
Ask about mobile device management
Send us your question and we will come back to you. We call back within the hour in office hours.
Rather talk? Call 01642 661888. Already a customer with a fault? Call the service desk on 01642 661800.
Please fill in every field marked *, then send again.
That email address does not look right. Please check it and send again.
We have had several messages from you in a short time. Please call us on 01642 661888 instead.
Online messages are paused for the moment. Please call us on 01642 661888.
Your message is too long for this form. Please shorten it, or call us.
Something went wrong on our side and your message was not sent. Please call us on 01642 661888.
We could not confirm that a person sent this message. Please try again, or call us on 01642 661888.
Talk to a human about mobile device management
Call and we answer within three rings. Or tell us what you need and we will call you back at any time.