1. Purpose of this Guide
This artefact proves your company’s mobile devices are securely and automatically backed up. Cyber Essentials requires this because mobiles often hold sensitive client conversations, contacts, and operational data. Without backups, a lost or broken phone could mean lost business-critical data.
2. What You Will Submit
You will need:
-
A screenshot from your mobile device or MDM console showing backup settings.
-
The screenshot should clearly show:
-
Backup turned ON.
-
Type of data being backed up (SMS, contacts, app data, etc.).
-
Destination (cloud account, secondary storage, or MDM-managed system).
-
Automatic/scheduled backup frequency.
-
3. How to Collect / Obtain / Generate This Evidence
Apple iOS (iCloud Backup):
-
Open Settings → [Your Name] → iCloud → iCloud Backup.
-
Ensure iCloud Backup is toggled ON.
-
Screenshot the screen showing backup enabled, with timestamp of last successful backup.
Android (Google Backup):
-
Open Settings → Google → Backup.
-
Confirm Backup by Google One is ON.
-
Screenshot showing items backed up (App data, Contacts, SMS, etc.) and latest backup time.
Mobile Device Management (MDM) tools (e.g., Intune, Jamf, Workspace ONE):
-
Log into your MDM admin portal.
-
Go to Device Configuration → Backup Policy.
-
Screenshot showing that corporate devices have automatic backup policies enforced.
4. Evidence Format
-
Accepted file types: PNG, JPG, PDF.
-
Suggested naming format:
YourCompanyName_MobileBackup_YYYY-MM-DD.png
5. What “Good” Looks Like
-
Shows backup enabled and running automatically.
-
Data types listed (contacts, SMS, app data).
-
Destination storage clear (iCloud, Google Drive, or corporate backup system).
-
A recent backup timestamp visible.
Why it matters: auditors want proof that if a device is lost or damaged, data isn’t gone forever — it can be recovered quickly.
6. Tips
-
Redact personal photos, messages, or irrelevant apps before capturing.
-
Standardise settings across all corporate phones (via MDM) to avoid exceptions.
-
Run a test restore on one device — it proves your backups actually work.