Rev. February 2026

Family Cybersecurity Playbook

A practical, family-friendly guide to protecting your devices, data, and digital identity—adapted from OSA's enterprise security methodology.

The M-V-P Framework for Family Cybersecurity

Adapted for personal use from OSA's enterprise methodology, this framework helps your family stay secure through three simple principles.

🗺️

(M)ap

Inventory Your Digital Environment

Create a shared family list of all devices and sensitive data.

What to Map:

  • ✅ All devices (phones, computers, tablets, smart home devices)
  • ✅ Who uses each device
  • ✅ What sensitive data each device holds
  • ✅ Cloud accounts and services

(V)erify

Regular Security Audits

Quarterly "family security checkup"

What to Verify:

  • ✅ Find My / Find My Device enabled
  • ✅ OS and apps are up to date
  • ✅ Backups running successfully
  • ✅ MFA enabled on critical accounts
  • ✅ Password manager in use
  • ✅ App permissions reviewed
🛡️

(P)rotect

Proactive Defense

Focus on settings, updates, and vulnerability management.

  • Updates: Automatic OS/app updates enabled
  • Configurations: Follow device settings review
  • Education: Quarterly family meetings
  • Testing: Review response plans

Start Small, Build Momentum

Don't try to do everything at once. Pick one device, secure it properly, then move to the next. Most families can complete their initial security setup in 2-3 weekends.

Mobile Device Settings Review

Your phone is the most important device to secure—it contains your email, banking apps, photos, and often has access to everything else. Follow these platform-specific checklists.

iOS 17.3+ only. This is your most important security setting. Go to Settings > Face ID & Passcode > Stolen Device Protection and turn it ON. This requires Face ID/Touch ID and adds a security delay before allowing critical changes like password resets—even if someone has your passcode.

Critical Setting

Stolen Device Protection is the single most important security feature on iOS 17.3+. If you only configure one setting, make it this one. It prevents thieves from changing your Apple ID password or disabling Find My—even if they have your passcode.

Note

Quarterly Review: Set a recurring calendar reminder every 3 months to review these settings as a family. New features and security options are added regularly.

Lost or Stolen Device Response Plan

Hope for the best, prepare for the worst. If your device goes missing, follow these steps immediately.

1️⃣ Try Locating the Device

iPhone/iPad: Go to icloud.com/find or use the Find My app on another Apple device.

Android: Visit android.com/find from any browser.

If your device is nearby (in your car, at a friend's house), use "Play Sound" to locate it.

2️⃣ Assess the Situation

Lost nearby? Try calling it, retracing your steps, or using location tracking.

Truly stolen? Proceed immediately to step 3. Don't delay—every minute counts.

3️⃣ Call Your Mobile Carrier

Suspend service immediately to prevent unauthorized use:

  • Verizon: 800-922-0204
  • AT&T: 800-331-0500
  • T-Mobile: 877-746-0909

Ask about insurance claims if you have device protection.

4️⃣ Lock or Erase the Device

Use "Lost Mode" first (iPhone) or "Secure Device" (Android). This locks your device and displays a custom message with a contact number.

Erase as last resort: If the device contains highly sensitive data and you're certain it won't be recovered, remotely erase it. Note: You'll lose the ability to track its location after erasing.

5️⃣ Lock Down Your Accounts

Change passwords immediately for accounts accessed on that device:

  • ✅ Email accounts (Gmail, Outlook, iCloud)
  • ✅ Banking and credit card apps
  • ✅ Social media accounts
  • ✅ Password manager (if used on device)
  • ✅ Work accounts and VPN

Enable or update multi-factor authentication on all accounts.

6️⃣ Ongoing Monitoring

Watch for suspicious activity over the next 30-60 days:

  • ✅ Check bank and credit card statements for unauthorized charges
  • ✅ Review credit reports for new accounts opened in your name
  • ✅ Monitor email for password reset attempts
  • ✅ Consider placing a fraud alert with credit bureaus

File a Police Report

If your device was stolen (not just lost), file a police report. You'll need the report number for insurance claims, and it helps law enforcement track theft patterns in your area.

Protecting Your Identity

Device theft can lead to identity theft if you're not careful. Here's how to protect yourself beyond securing the physical device.

🔐 Lock Down Critical Accounts

If your device stored login credentials (even in a browser), assume those accounts are compromised. Change passwords on email, banking, work accounts, and any service with payment information stored.

🔑 Multi-Factor Authentication

Enable MFA on every account that supports it—especially email and financial accounts. Use an authenticator app (Google Authenticator, Authy, 1Password) rather than SMS when possible. If your phone was stolen, disable SMS-based MFA and switch to app-based.

💳 Banking & Credit Cards

Notify your bank and credit card companies immediately. Cancel cards stored in mobile wallets (Apple Pay, Google Pay). Request replacement cards with new numbers. Consider placing a freeze on your credit reports at Equifax, Experian, and TransUnion.

👁️ Ongoing Monitoring

Monitor credit reports quarterly (annualcreditreport.com is free). Set up account alerts for large transactions. Consider identity theft protection services if your device contained sensitive personal information (SSN, tax documents, etc.).

Family Debrief

After a device loss or theft, hold a family meeting to review what happened and what you learned. Update your family security plan based on the experience. Turn it into a teaching moment rather than just a stressful event.

Windows & macOS Workstation Basics

Laptops and desktops deserve security attention too—especially if they contain work files, tax documents, or sensitive personal information.

macOS: System Settings > Privacy & Security > FileVault. Turn it on to encrypt your entire disk. Windows: Settings > Privacy & security > Device encryption or BitLocker (Pro versions). This protects your data if your laptop is lost or stolen.

Note

For families with multiple computers: Create a shared checklist and work through each machine together. It's a great opportunity to teach kids about security while you're configuring their devices.

Family Rules for AI Tools

AI assistants like ChatGPT, Gemini, and Claude are powerful tools—but they require smart usage. Here's how to use AI safely as a family.

Don't paste passwords, credit card numbers, social security numbers, medical records, or confidential work documents into AI tools. Treat AI conversations as if they could be read by anyone.

Children should use AI tools with parental supervision. Discuss what information is safe to share (homework help is fine; full name, address, school name is not). Review their AI conversations periodically, just like you would social media.

Make It a Conversation

Don't just set rules—explain why they matter. Show kids examples of AI making mistakes or generating fake content. Help them develop critical thinking skills around AI-generated information.

Additional Resources

🛠️ Recommended Tools

  • Password Manager: 1Password
  • VPN (Home Use): ProtonVPN
  • Enterprise Security: Checkpoint SASE
  • Authenticator Apps: Google Authenticator, Microsoft Authenticator, Authy, 1Password

Info

Overwhelmed? Start with the basics: Enable Find My/Find My Device on all phones, turn on automatic backups, and set strong passcodes. Those three actions alone will protect you from the majority of common threats.

Need Help Securing Your Family or Business?

OSA Technology Partners provides enterprise-grade cybersecurity solutions tailored to your needs—whether you're protecting a family of four or a business of 400.

Contact Dustin Leggans

Schedule a Security Assessment