Endpoint management is the inventory of every laptop, desktop and phone the organisation's work happens on, with an agent on each that patches it, reports its state and can lock or wipe it from a distance. Endpoint management services are a provider running that agent; remote endpoint management is the same for the people who never come to the office; endpoint security management and endpoint management security are the inventory with protection added, which is the whole point. For the owner or office manager who has been handed security, the first question is which devices are allowed at all, and that is a policy. This page is about the inventory and the policy, and the free policy sheet on this site sizes the written set from the organisation's own facts with no account.
The inventory and the agent
Every device the organisation's data touches is on a list with its owner, its operating system, its patch state and whether it is encrypted; the agent keeps the list true and pushes the patches. A device not on the list is the one the attacker uses, and CISA's small-business guidance names patching and device protection among the basics.
Remote, and the personal device
Remote endpoint management is the agent on the laptop in the spare bedroom; the personal-device policy is whether the organisation may put its agent on a phone it does not own and wipe the work data from it. The policy sheet on this site adds a policy when personal devices are used: 12 people, 8 systems with their own login, remote work, card payments and personal devices is a set of nine policies, 27 hours to draft, 13.5 hours a year to keep reviewed and $1,822.50 in the first year at $45 an hour on the worked example.
Management with security on it
Endpoint security management adds protection, encryption and the lost-device wipe to the inventory. A provider selling endpoint management services should say which of the three it does and to which devices; Hardenvo Pro writes the device and remote-work policies the provider enforces and keeps them current at one flat price.
Questions people ask about endpoint management
What is endpoint management?
An inventory of every device with an agent that patches, reports and can lock or wipe it; the device policy says which are allowed on the list.
What does remote endpoint management add?
The same agent on devices that never come to the office, and the remote-work and personal-device policies that govern them.
Where does the device policy come from?
From the organisation's written set, sized by the free policy sheet and written by Hardenvo Pro.