Role of GRC (Governance, Risk, and Compliance) in Mobile Computing

This research paper examines how the rapid proliferation of mobile devices, remote work models, and edge computing has transformed organizational workflows, introducing complex security vulnerabilities and regulatory pressures. This overview synthesizes the vital role of Governance, Risk, and Compliance (GRC) frameworks within mobile computing environments.
Mobile GRC aligns organizational objectives with technical controls and systematically addresses risks such as data leakage, unauthorized access via untrusted networks, and device loss. Through robust Governance, organizations define usage policies (e.g., BYOD, COPE) and enforce identity-centric access control models like Zero Trust. Integrated Risk Management mitigates technical vulnerabilities using Mobile Device Management (MDM), containerization, remote wiping, and continuous threat monitoring. Simultaneously, Compliance mechanisms ensure strict adherence to evolving data privacy regulations (such as GDPR, HIPAA, and PCI-DSS) through automated policy enforcement, audit logging, and encryption standards. Ultimately, a unified mobile GRC strategy enables enterprises to balance user mobility and operational productivity with rigorous endpoint security and regulatory accountability.

Mobile GRC, Zero Trust Architecture, Zero-Knowledge Proofs (ZKP), Explainable AI (XAI), Mobile Application Management (MAM), Policy-as-Code (PaC), Bring Your Own Device (BYOD), Data Privacy.

1. Abdul, A. M., Mohammad, A. A. K., Reddy, P. V., Nuthakki, P., Kancharla, R., Joshi, R., & Kannaiya Raja, N. (2022). Enhancing security of mobile cloud computing by trust- and role-based access control. Scientific Programming, 2022, Article 9995023. https://doi.org/10.1155/2022/9995023 [Google Scholar] [Crossref]

2. Ayres-Pereira, V., Pirrone, A., Korbmacher, M., Tjostheim, I., & Böhm, G. (2022). The privacy and control paradoxes in the context of smartphone apps. Frontiers in Computer Science, 4, 986138. https://doi.org/10.3389/fcomp.2022.986138 [Google Scholar] [Crossref]

3. Basha, S. M. (2022). Systematic analysis of research trends, methods and datasets in mobile device security. Mathematical Statistician and Engineering Applications, 71(4), 12741–12751. https://doi.org/10.17762/msea.v71i4.2534 [Google Scholar] [Crossref]

4. Boeckl, K., Grayson, N., Howell, G., Lefkovitz, N., Ajmo, J., Craft, R., McGinnis, M., Sandlin, K., Slivina, O., Snyder, J., & Ward, P. (2023). Mobile device security: Bring your own device (BYOD) (NIST Special Publication 1800-22). National Institute of Standards and Technology. https://doi.org/10.6028/NIST.SP.1800-22 [Google Scholar] [Crossref]

5. Boonkrong, S. (2024). Comparative vulnerability analysis of Thai and non-Thai mobile banking applications. Journal of Cybersecurity and Privacy, 4(3), 650–662. https://doi.org/10.3390/jcp4030031 [Google Scholar] [Crossref]

6. Chang, S. Y., Sarker, A., Wuthier, S., Kim, J., Kim, J., & Zhou, X. (2024). Base station gateway to secure user channel access at the first hop edge. Computer Networks, 240, 110165. https://doi.org/10.1016/j.comnet.2023.110165 [Google Scholar] [Crossref]

7. Chimuco, F. T., Sequeiros, J. B. F., Lopes, C. G., Simões, T. M. C., Freire, M. M., & Inácio, P. R. M. (2023). Secure cloud-based mobile apps: Attack taxonomy, requirements, mechanisms, tests and automation. International Journal of Information Security, 22, 833–867. https://doi.org/10.1007/s10207-023-00669-z [Google Scholar] [Crossref]

8. Cinar, A. C., & Kara, T. B. (2023). The current state and future of mobile security in the light of the recent mobile security threat reports. Multimedia Tools and Applications, 82, 20269–20281. https://doi.org/10.1007/s11042-023-14400-6 [Google Scholar] [Crossref]

9. Howell, G., Brady, K. G., Harriss, D., & Ledgerwood, S. (2022). Security guidance for first responder mobile and wearable devices (NIST Interagency Report 8235). National Institute of Standards and Technology. https://doi.org/10.6028/NIST.IR.8235 [Google Scholar] [Crossref]

10. Howell, G., Franklin, J., Sritapan, V., Souppaya, M., & Scarfone, K. (2023). Guidelines for managing the security of mobile devices in the enterprise (NIST Special Publication 800-124 Rev. 2). National Institute of Standards and Technology. https://doi.org/10.6028/NIST.SP.800-124r2 [Google Scholar] [Crossref]

11. Jakir Hossain, M., Seid, A. M., Abishu, H. N., Dharejo, F. A., Jhaveri, R. H., Erbad, A., & Alathbah, M. (2024). ASMCC+: A secure authentication scheme for mobile cloud computing environment based on zero trust architecture. IEEE Transactions on Consumer Electronics, 70(3), 6236–6249. https://doi.org/10.1109/TCE.2024.3415437 [Google Scholar] [Crossref]

12. Kadir, A. F. A., Lashkari, A. H., & Firoozjaei, M. D. (2024). Mobile application security. In Understanding cybersecurity on smartphones (pp. 89–101). Springer. https://doi.org/10.1007/978-3-031-48865-8_6 [Google Scholar] [Crossref]

13. Kouliaridis, V., Karopoulos, G., & Kambourakis, G. (2023). Assessing the security and privacy of Android official ID wallet apps. Information, 14(8), 457. https://doi.org/10.3390/info14080457 [Google Scholar] [Crossref]

14. Liu, Z., Wang, X., Li, X., & Liu, J. (2022). Protecting privacy on mobile apps: A principal-agent perspective. ACM Transactions on Computer-Human Interaction, 29(1), 1–32. https://doi.org/10.1145/3475797 [Google Scholar] [Crossref]

15. Malware detection for mobile computing using secure and privacy-preserving machine learning approaches: A comprehensive survey. (2024). Computers & Electrical Engineering, 117, 109233. https://doi.org/10.1016/j.compeleceng.2024.109233 [Google Scholar] [Crossref]

16. Malsa, N., Jain, R., & Goyal, S. B. (2025). Mobile device security: A two-layered approach with blockchain and sensor technology for theft prevention. Scalable Computing: Practice and Experience, 25(6). https://doi.org/10.12694/scpe.v25i6.3355 [Google Scholar] [Crossref]

17. Mora, H., Pujol, F. A., Ramirez-Gordillo, T., & Jimeno, A. (2024). Mobile cloud computing paradigm: A survey of operational concerns, challenges and open issues. Transactions on Emerging Telecommunications Technologies, 35, e70020. https://doi.org/10.1002/ett.70020 [Google Scholar] [Crossref]

18. Pan, B., Guo, H., You, X., & Xu, L. (2022). Privacy rating of mobile applications based on crowdsourcing and machine learning. Journal of Global Information Management, 30(3), 1–15. https://doi.org/10.4018/JGIM.20220701.oa5 [Google Scholar] [Crossref]

19. Sheikh, B., Butt, A., & Hanif, J. (2023). Mobile cloud computing: A survey on current security trends and future directions. Engineering Proceedings, 32(1), 22. https://doi.org/10.3390/engproc2023032022 [Google Scholar] [Crossref]

20. Ying, C. X., Kasmin, I. F., Amin, S., & Zainal, N. K. (2023). Cybersecurity education through mobile application to prevent cyber attacks during COVID-19. International Journal of Data Science and Advanced Analytics, 4(2), 27–33. https://doi.org/10.69511/ijdsaa.v4i0.139 [Google Scholar] [Crossref]

21. Yin, T. S., Kasmin, I. F., Zainal Abidin, Z. M., & Vasudavan, H. (2023). Mobile application for cybersecurity education and awareness since COVID-19 pandemic. International Journal of Data Science and Advanced Analytics, 4(2), 263–269. https://doi.org/10.69511/ijdsaa.v4i0.175 [Google Scholar] [Crossref]

22. Zaitseva, E., Hovorushchenko, T., Pavlova, O., & Voichur, Y. (2023). Identifying the mutual correlations and evaluating the weights of factors and consequences of mobile application insecurity. Systems, 11(5), 242. https://doi.org/10.3390/systems11050242 [Google Scholar] [Crossref]

• What the Desert Fathers Teach Data Scientists: Ancient Ascetic Principles for Ethical Machine-Learning Practice
• Comparative Analysis of Some Machine Learning Algorithms for the Classification of Ransomware
• Comparative Performance Analysis of Some Priority Queue Variants in Dijkstra’s Algorithm
• Transfer Learning in Detecting E-Assessment Malpractice from a Proctored Video Recordings.
• Dual-Modal Detection of Parkinson’s Disease: A Clinical Framework and Deep Learning Approach Using NeuroParkNet