Overview

A mobile application is software that runs on a mobile device, such as a smartphone or tablet. These applications often access cloud based applications or services to provide information to the user.

Why are they asking this?

Mobile applications can extend the boundaries of the application, especially if they retain data or credentials.  Mobile devices are more often lost or stolen than other devices, putting data at risk.

What do they expect?

If there is a mobile application as part of the system, they expect details about the application, such as; the name, what platforms it works on, what data is stored on the device and if it is encrypted, and details about the communications between the mobile application and the cloud backend. This is in addition to the other questions that apply to all systems and applications.