372 Chapter11·MobileMalwareMitigationMeasures device may take considerable time or not even be possible in some cases. Most phones sup- port some type of computer synchronization tool that will allow you to back up at least the basic data like an address book. This will significantly aid in recovering from a device loss or failure. In fact, many such tools can be configured to back up or synchronize the device automatically whenever it connects to the computer. If you're the type that doesn't usually connect your phone to a computer, you should attempt to at least do it periodically just to guard against data loss. If the vendor synchronization tools are not sufficient for your needs or scale, numerous third-party solutions are available. Audit Perhaps even more important than backup is audit. If a device is lost, stolen, or compromised it's important to know what information was on it so you can understand what is at risk and what you need to do. Individual users may have a good idea of what is on there. For corporate use though, it is often more difficult for an IT department to keep track of this. Fortunately, so far the amount of storage is limited on these devices, so it's not too hard for a user to have at least a rough estimate of the contents of the phone. If you keep very sensitive information on the phone, you should make note of this. There are not many products specifically adapted to mobile usage to do this on a large scale. If your environment