For all devices I know of, if a device is lost or stolen, it needs to be connected to the Cellular network to receive the wipe command. Considering that the end user often needs to regain mobile service as soon as possible, there is a delay between when they activate a new phone (thus disabling the old phone's service) and when the wipe command is issued by IT and received by the old device.
What processes, or mechanisms do you have in place to ensure the confidentiality of a mobile device's data that account for this situation?
Please include process or technological solutions that are device, vendor, or protocol (ActiveSync) specific. For example, I'd be interested in a solution someone may have with Verizon that puts a notice on the account that prevents the purchase of a new SIM unless IT was notified or approved.