The Chief Risk Officer is concerned about the new employee BYOD device policy and has requested the security department implement mobile security controls to protect corporate data in the event that a

Asset tracking uses GPS or MDM to locate a device, but once the SIM is removed the device loses cellular-based location capability, failing the stated requirement.

Screen locks require authentication (PIN, password, biometric) before granting access to the device, providing the first layer of protection against unauthorized use of a lost or stolen device.

Geo-tagging embeds location data into photos; it does not protect corporate data on a lost or stolen device.

Patch management keeps software updated to reduce vulnerabilities but does not protect stored data if the device is physically stolen.

Device encryption renders all stored data unreadable without the correct decryption key, protecting corporate data at rest regardless of whether the SIM card is present or removed, directly satisfying the stated requirement.