What it means
Years ago, work happened on office computers connected to the company network. Today, people read email, approve payments and access financial systems from their phones, often on personal devices.
Each device is a potential door into company data, and EMM exists to keep those doors under control. An EMM platform typically includes mobile device management, which controls settings and can lock or wipe a lost device, and mobile application management, which controls the work apps and their data.
It may also include identity and access controls, such as requiring a strong sign-in before showing sensitive information. Some platforms keep work and personal data in separate areas on the same phone.
The business case combines security, productivity and cost. A lost phone with unprotected company data can lead to regulatory fines and reputational damage.
At the same time, letting employees use their own devices can reduce hardware spending, though the company may still have to pay for management software and support. Finance teams care about EMM for several reasons.
Approvals for payments or expenses often happen on mobile devices, so strong controls support the integrity of the process. The cost of licences, support and any stipend for personal devices must also be budgeted and tracked.
A nuance is that stricter controls can frustrate employees, who may look for workarounds that create more risk. The best policies balance security with ease of use and explain clearly what the company can and cannot see on a personal device.
Rules on privacy and data protection also differ between countries, so legal advice is important. Regulation adds another layer.
Companies that handle personal data or financial information must show that they protect it, and mobile devices are one of the first places an auditor will look. Documented policies and system reports provide the evidence they need.
In practice
Real-world examples.
Example
A sales company lets its 300 representatives use personal phones to access the customer system. The EMM platform places the company apps in a protected area and can wipe only that area if a phone is lost. The employee's photos and messages remain untouched.
Example
A finance director approves invoices using a mobile app. The company requires multi-factor authentication and blocks the app on phones that have been modified to remove security settings. The audit team regards these controls as important evidence of secure approvals.
Example
A construction firm gives rugged tablets to site managers to submit timesheets and orders. The EMM system pushes updates to the tablets and restricts them to approved apps. When one tablet is stolen, the office locks it remotely within minutes.
Formula
Calculation
Annual EMM cost per device = (Licence cost per device per month x 12) + Annual support cost per device
Suppose a company has 500 devices, and the EMM licence costs $6 per device per month. The licence cost per device per year is 6 x 12 = $72. Support costs add $18 per device per year, so the total is 72 + 18 = $90 per device. For 500 devices, the annual cost is 500 x 90 = $45,000.Case study
Seen in the real world.
Falcon Crest Insurance is a fictional company, and this case study is illustrative. Its claims adjusters used personal phones to photograph damage and send reports, and the company had no controls over those devices. After an adjuster lost a phone containing images of customer documents, the risk team estimated that a breach could cost $300,000 in notifications and legal advice.
The company introduced an EMM platform at a cost of about $60,000 a year. Adjusters now use a secure work app on their phones, with the ability to wipe company data remotely if a device is lost. The finance director concluded that the annual cost was small compared with the potential cost of a data breach, and that productivity had improved because adjusters could upload photos immediately.
The risk team now reviews the platform's reports every month, looking at devices that are out of date or non-compliant. The finance director uses the same reports as evidence for auditors, which reduced the time spent on the annual security review.
Watch out
Common mistakes.
- Thinking EMM only matters for company-owned devices, when personal devices often carry more risk.
- Choosing very strict rules without considering employee experience, which leads staff to find insecure workarounds.
- Not telling employees what the company can see or erase on their personal devices.
Questions
People also ask.
What does EMM include?
It typically includes device management, application management, content and data protection, and access controls.
Is EMM the same as MDM?
Not exactly, because mobile device management is one component of the wider EMM approach that also covers apps, content and identity.
What happens if an employee leaves?
The company can remove its apps and data from the device, and a well-designed system leaves the person's own data alone.
From the founder's library
Take it further with the book.
Build your financial confidence beyond this definition. Shihan's full-length guide, Accounting Fundamentals, takes the same plain-English approach and turns it into a complete, practical playbook for non-finance managers, business owners and students - with chapter-end quiz answers and presentation slides included.
25% off with code MMHQ25, applied at checkout. Priced in USD - checkout may show the equivalent in your local currency.
View the book and save 25%Related