Mitigations for potentially compromised electronic devices

A computer-readable storage device having computer readable logic embodied thereon for enabling a management system to perform a method, the method comprising:

• receiving an indication over a communication network from an electronic device remote from the management system that the electronic device is at least potentially compromised;
• queuing an instruction to initiate remediation of the electronic device;
• receiving the instruction from the queue;
• retrieving contact information for the electronic device;
• retrieving a remediation policy for the electronic device;
• transmitting the instruction to the electronic device over the communication network to initiate remediation of the electronic device;
• receiving an indication that the electronic device is not potentially compromised over the communication network;
• and
• transmitting a second instruction to the electronic device over the communication network to initiate recovery of the electronic device.

A management system, comprising:

• a network interface configured as a communication interface with a network;
• a system management interface configured to provide a user interface to enable an indication to be provided over the network that an electronic device remote from the management system is at least potentially compromised, to generate a device remediation instruction, and to receive an indication that the electronic device is not potentially compromised;
• an instruction queue configured to queue the device remediation instruction;
• and
• a message service configured to receive the device remediation instruction from the queue, to retrieve contact information for the electronic device, to retrieve a remediation policy for the electronic device, to transmit the device remediation instruction over the network to the electronic device according to the retrieved contact information to initiate remediation of the electronic device, and to transmit another instruction to the electronic device to initiate recovery of the electronic device;
• the system management interface module is configured to enable a user to log into a management service, to enable the user to select the electronic device, to indicate one or more details regarding the selected electronic device to the user, and to enable the user to confirm that the selected electronic device is at least potentially compromised.