Write the first three actions
Use the provider's current guidance to identify the appropriate security control, official contact route and account-recovery process. Store non-sensitive contact information somewhere accessible without the lost phone. Ask which verification steps recovery may require and how a traveller can complete them. Avoid keeping the only copy of the response plan inside the same device or application the person will be unable to access during the incident.
Protect the work as well as the account
Agree how urgent business purchases will be handled while access is unavailable. Review recent activity through an approved route and keep a record of the incident. Do not share credentials with a colleague as an improvised shortcut. After recovery, review authorised devices and the provider's recommended checks. A useful continuity plan balances the immediate need to protect access with the operational need to keep the trip or project moving through authorised means.
Hypothetical example
A hypothetical consultant loses a phone between client meetings. The trip plan contains the provider's official contact route and an approved purchasing alternative. The consultant can follow the recovery process without asking a colleague to share login details or improvising a payment arrangement under time pressure.
Make it practical.
Use this checklist as you read. Checks are not stored.References & further reading
Background reading — PCI Security Standards Council: merchant resources ↗Published by Tap Tap Go. Product availability and eligibility vary by programme and market. About our stories.
