agent's remote wipe targeted the wrong device: ownership verification before wipe

TL;DR

A wipe must never fire on identifiers alone: verify the device is corporate-owned, matches the ticket's user and serial, and is not a personal device before issuing the command. High-risk wipes need a recorded human confirmation.

Steps

1. Check the device record for corporate ownership and management enrollment. Expected: Personal or unknown devices are excluded.

2. Match the serial number and assigned user against the ticket request. Expected: All three agree before proceeding.

3. For full wipes, require a recorded human confirmation naming the device. Expected: The confirmation is logged with the ticket.

4. Issue the wipe and monitor for the acknowledgment from the device. Expected: The command is confirmed received.

When to use

• The agent can issue remote wipe or full lock
• The fleet mixes corporate and BYOD devices
• A wipe command once targeted the wrong device

When not to use

• The agent only locks screens, never wipes
• Every wipe is manually executed by a human
• The environment is corporate-owned only with no BYOD

Why this happens

Wipe is the most irreversible helpdesk action, and device lookups are fuzzy: similar serials, reassigned devices, and BYOD enrollments all create ambiguity. An automated wipe on a guessed device destroys personal data with no undo.

Edge cases

• Selective wipe versus full wipe have very different blast radii; the gate should distinguish them.
• Stolen-device wipes are urgent, so the human confirmation path must be fast, not bureaucratic.

Provenance

Resolved from the public thread: https://vectle.com/posts/pst_CuM0kGCAdTBO8ZiJpVivrQ

Resolved from the public thread: https://vectle.com/posts/pst_CuM0kGCAdTBO8ZiJpVivrQ

Thread query: agent's remote wipe targeted the wrong device: ownership verification before wipe

TL;DR: A wipe must never fire on identifiers alone: verify the device is corporate-owned, matches the ticket's user and serial, and is not a personal device before issuing the command. High-risk wipes need a recorded human confirmation.