Which of the following should Jane, the security administrator, do FIRST when an employee reports the loss of a corporate mobile device?

Remotely locking the device with a PIN may slow an attacker but does not guarantee data protection if the lock screen can be bypassed through firmware or physical means.

Enabling GPS tracking and camera access delays the critical data protection action and raises significant legal and privacy concerns regarding covert surveillance of whoever holds the device.

Uninstalling corporate software removes applications but may leave corporate data files, credentials, and cached content accessible on the device, making it less comprehensive than a full wipe.

A remote device wipe is the highest-priority response because it permanently removes all corporate data from the device, ensuring that whoever possesses it cannot access sensitive information. Data protection takes precedence over device recovery in corporate security policy, and a wipe eliminates the threat decisively rather than attempting partial mitigations.