Endpoint security Singapore: laptops, phones and device management
A lost phone, an unpatched laptop or a leaver who keeps company data can each expose personal data. We set up and run device management for you, so every laptop, phone and tablet is updated, locked down and recoverable from one console. The result is endpoint security Singapore teams can run without an IT department.
Who asks for it, and what it shows them
The questions people ask you, and what this answers.
- Regulators“If a laptop is lost, is the data protected?”PDPA s24(b) requires reasonable arrangements to prevent the loss of any device storing personal data.Singapore Statutes Online (PDPA), read 12 Oct 2026
- Insurers“Are mobile devices encrypted and password protected?”Insurer proposal forms ask this on its cyber proposal form.MSIG Insurance (Singapore) Pte Ltd, read 12 Oct 2026
- Management“Who is responsible for device security when we use the cloud?”Microsoft says customers always remain responsible for protecting endpoints, including laptops and phones.Microsoft, read 12 Oct 2026
- Tender panels and procurement“Do you meet a recognised device baseline?”Cyber Essentials requires passcodes and auto-lock on mobile devices, and no jailbroken or rooted devices.Cyber Security Agency of Singapore (CSA), read 12 Oct 2026
PDPA s24 requires reasonable security arrangements to prevent the loss of any storage medium or device on which personal data is stored.
Singapore Statutes Online (PDPA), read 12 Oct 2026What you get
- Every device enrolled and listed
- Updates and security settings pushed centrally
- Lost or stolen devices locked or wiped
- Leavers’ access removed on their last day
- A monthly device report
Authorised Scalefusion partner
Managed with Scalefusion
We are an authorised Scalefusion partner. We enrol your Windows, Mac, Android and iPhone devices, push updates, enforce passcodes and encryption, and lock or wipe a lost device remotely. You get a monthly report you can show your auditor or insurer.
- A device inventory, kept current
- A monthly device report you can show your auditor or insurer
The PDPA requires reasonable security arrangements. An 11-month-late software patch cost one Singapore jeweller S$58,000.
How it works
- You
Tell us how many laptops, phones and tablets you run, and who uses them.
- Us
We enrol each device in mobile device management (MDM) and set the security rules.
- Result
Every device stays updated, encrypted and lockable, with a report you can show.
Common questions
What is endpoint security?
Protecting the devices people work on: laptops, phones and tablets. Endpoint security means updates on time, passcodes and encryption, malware protection, and the power to lock or wipe a device that is lost or leaves with a former staff member.
What is mobile device management (MDM)?
Software that lets you enrol company and staff devices, push settings and updates, separate work data, and lock or wipe a device remotely. We use Scalefusion and run it for you.
Does device management help with the PDPA?
Yes. The Personal Data Protection Act (PDPA) requires reasonable security for personal data. Encrypted, updated and lockable devices are a practical part of that security, and the device report gives you evidence if the regulator or an insurer asks.
Can staff use their own phones?
Yes. Device management can keep work apps and data in a separate, managed space on a personal phone, so you can remove company data without touching personal photos or messages.
Latest PDPC case on this topic · 2026-09-21 · Retail, wholesale and e-commerce · Voluntary undertaking
One administrator login shared by five staff was compromised and used to skim customers' card data; give each user their own account and limit admin access.
Read the PDPC decision of 21 September 2026, on pdpc.gov.sg (opens in a new tab)Authorised Scalefusion partner.
Compliance is black and white. Your business isn’t.
Leave your details and an adviser replies within 2 office hours.
Download a one-page brief for your management or board (PDF, 68 KB)