A government contracting company issues smartphones to employees to enable access to corporate resources. Several employees will need to travel to a foreign country for business purposes and will…

Disabling OTA firmware updates prevents security patches from being applied, which increases the device's vulnerability to known exploits rather than reducing risk.

Disabling location services prevents the device from collecting or broadcasting GPS and network-based location data, which a nation-state adversary could intercept, correlate, or use to target employees for surveillance or device seizure. Given the specific intelligence about foreign government interest in the company's IP, physical location tracking is a direct operational security risk. MDM policy can enforce this setting on managed devices before travel begins.

Disabling push notifications marginally reduces information leakage but does not address the primary threat of physical tracking and surveillance by a foreign government actor.

Disabling wipe removes the ability to remotely erase the device if it is lost or confiscated, which substantially increases the risk of data compromise.