What are ANSSI's recommendations regarding mobile phones?

In a world where nearly 98% of French people own a mobile phone and where the smartphone has become the primary access point to the internet, the line between personal and professional use has never been so blurred. This widespread adoption in both private and professional life is accompanied by an increase in risks, as more than a third of very small and small businesses (VSEs/SMEs) have already experienced a cyber threat. In this context, the recommendations of ANSSI, France's national cybersecurity authority, appear more essential than ever.

The main risks identified by ANSSI

ANSSI points out that mobile phones are concentrated in several major vulnerabilities: increasing exposure to malware, risks related to the loss or theft of devices that provide access to sensitive data, and data interception via active wireless interfaces.

Attacks targeting Wi-Fi or Bluetooth networks, phishing campaigns, and SIM swapping attempts are also among the most common threats, reinforcing the need for appropriate protections.

Simple steps to take to protect mobile phones

To reduce the exposure of devices, ANSSI recommends keeping the operating system and applications up to date and only installing applications from trusted sources, ideally official app stores. It also advises disabling Wi-Fi, Bluetooth, and NFC when not in use. Finally, raising user awareness remains essential to preventing phishing and risky behavior.

Adopt a secure solution for your mobile phone

To limit the risks associated with professional mobile phone use, ANSSI recommends strengthening access security for your device. This begins with using effective locking mechanisms, based on a strong password or reliable biometrics. Enabling device encryption is also recommended to protect data in case of loss or theft.

In sensitive environments, sovereign solutions like Cryptosmart Mobile strengthen authentication and cryptographic key protection, complementing the mechanisms recommended by the French National Cybersecurity Agency (ANSSI).

For organisations, using a mobile device management (MDM) solution provides an additional layer of security by enabling remote device configuration, the application of consistent security policies, and even data erasure in the event of an incident.

Strengthen the protection of communications and data

To enhance the confidentiality of communications and precisely manage who has access to data, ANSSI recommends using encrypted messaging. The secure professional communication solution, Citadel Team, allows you to encrypt your messages end-to-end on your mobile phones.

The importance of configuring backups in secure environments is also emphasized. For this purpose, dedicated tools like Cybels Mobile Backup allow you to securely protect and restore critical data. Finally, securing file exchanges involves using a VPN for browsing and systematically checking HTTPS websites. Cryptosmart Mobile secures the connection of mobile devices to the organisation's information system and internet browsing end-to-end using a highly secure, sovereign VPN.

Actions to take in case of an incident

In the event of loss, theft, or compromise of a mobile phone, the French National Cybersecurity Agency (ANSSI) recommends immediately alerting the appropriate teams to limit the risk of data leaks. The agency also emphasizes the importance of being able to remotely erase data and lock the compromised device to prevent any unauthorised access.

With this in mind, solutions like Cybels Mobile Backup facilitate the secure restoration of data after remote erasure, thus reducing the operational impact of an incident. A rapid and structured response remains one of the most effective ways to contain the consequences of a breach.

Given that mobile devices are the primary focus of digital usage, ANSSI's recommendations underscore the urgent need to manage risks such as malware, interception, phishing, and device loss or theft. Adopting best practices, securing access, and protecting communications are essential.

In this context, sovereign solutions like Citadel Team, Cryptosmart Mobile, and Cybels Mobile Backup offer a coordinated response to the recommended measures. They enable organisations to improve the reliability of their mobile usage while remaining compliant with ANSSI requirements.