arendalsoftware engineering

SolutionsIT foundations

Device management

Every company laptop is known, patched and encrypted, and can be wiped the day it goes missing.

How we deliver it

  • We inventory every device and who uses it.
  • We set patching, disk encryption and remote-wipe policies.
  • New hires get a ready laptop; leavers get theirs wiped.

How it works

There is no single right setup for managing devices. A ten-person team with no regulator to answer to needs to know what it owns, keep it patched and wipe a lost laptop. A business that has to prove compliance to an auditor, an insurer or a customer needs continuous checks and a record of them. We pick the approach that fits your constraints and obligations, not the most elaborate one available.

WHAT THE CLIENT HASAPPROACHWHAT IT DELIVERSSmall team,few rulesAudits orregulationSuite alreadypaid forLightweightComprehensiveConfigurewhat you haveInventory,patching,wipeContinuouschecks,evidenceSame controls,no newlicenceSmall team,few rulesAudits orregulationSuite alreadypaid forLightweightComprehensiveConfigurewhat you haveInventory,patching,wipeContinuouschecks,evidenceSame controls,no newlicence
Constraints decide the approach, and the approach decides what you get.

The same lifecycle, whichever approach

Every approach covers the same life of a device. What changes is how much is enforced and checked along the way, and how much evidence is kept.

EVERY DEVICEIF LOSTlocked remotelyEnrolledon day onePoliciesappliedKeptpatchedCheckedWiped whenretiredReportedlostLocked andwiped remotelyData staysencryptedEVERY DEVICEIF LOSTlocked remotelyEnrolledon day onePoliciesappliedKeptpatchedCheckedWiped whenretiredReportedlostLocked andwiped remotelyData staysencrypted
From the first day to retirement, and when a device goes missing.

What decides it

Regulation and certifications
If a regulator, a customer contract or a security certification requires proof that devices are encrypted and patched, you need evidence over time, not a snapshot. That points to the comprehensive approach.
Insurance questionnaires
Cyber insurance forms ask the same questions an auditor does. Answering them honestly and quickly is often what tips a small team from lightweight to comprehensive.
What you already pay for
Many office suite plans include device management that sits unused. Configuring it properly can cover the need with no new licence.
The device mix
How many devices, and which operating systems. Coverage differs from one approach to another, especially for Linux and mixed device estates.
Who owns the devices
Company-owned devices can be fully managed. Personally owned ones get a lighter touch, limited to work data, so staff privacy is respected and the rules stay enforceable.

Starting light, growing later

A lightweight setup can be the right first step, and many teams never need more. If your obligations grow, moving to a comprehensive approach is possible, but it means enrolling every device again. If an audit or a demanding customer is already on the horizon, starting with the comprehensive approach costs less than switching later.

Your stack or ours

On what you already pay for

Microsoft Intune or Google endpoint management, set up properly.

Self-hosted, yours to keep

Self-hosted, on infrastructure you own: OpenUEM for a lightweight setup, or Fleet when audits or regulation call for continuous checks and evidence.

Hand over or run

Your choice, per solution. We hand it over with documentation your team can work from, or we keep it running: upgrades, monitoring and incidents, with one of us on call 24/7.

Proof

We run this stack for our own team, and set it up the same way for yours.

Talk to the person who builds it

Tell us what is slow, stuck, or held together by a spreadsheet. We will tell you what we think in one call, before any proposal.

DanielCo-Founder

daniel@arendal.ca