Keep the operating system and apps up to date. Use a screen lock and enable device encryption. Install only the work apps IT approves. Report a lost or stolen device to IT immediately so access can be revoked.