As the experience of one insurance broker proves, securing mobile devices requires a two-pronged approach.