mobile devices; (7) arrange for actions to mitigate impact when an information security incident occurs, for example, immediate disconnection upon being aware of an incident, etc. In the case that the