An electronic device configured for retail display, the electronic device comprising: a persistent memory on which boot instructions are stored as firmware; a storage device on which security monitoring instructions are stored; and a processor configured to execute the boot instructions stored as firmware during a boot sequence to initiate execution of the security monitoring instructions, wherein the boot instructions stored as firmware are executed by the processor during any startup sequence, including a sequence implemented at a factory reset; wherein the processor is further configured, via the execution of the security monitoring instructions, to monitor the retail display of the electronic device for a plurality of security trigger events and, upon detection of any of the plurality of trigger events, lock a user interface of the electronic device; wherein the plurality of trigger events comprise a primary trigger event and a secondary trigger event; wherein: for the primary trigger event removal of the primary trigger event does not unlock the electronic device and performance of one or more additional steps is required to unlock the electronic device; and for the secondary trigger event removal of the secondary trigger event automatically unlocks the electronic device; and wherein each of the primary and secondary trigger events (224, 226) are defined by the security monitoring instructions such that the execution of the security monitoring instructions causes the processor to lock the user interface of the electronic device before removal of the electronic device from a retail site in which the retail display of the electronic device is provided. a persistent memory on which boot instructions are stored as firmware; a storage device on which security monitoring instructions are stored; and a processor configured to execute the boot instructions stored as firmware during a boot sequence to initiate execution of the security monitoring instructions, wherein the boot instructions stored as firmware are executed by the processor during any startup sequence, including a sequence implemented at a factory reset; wherein the processor is further configured, via the execution of the security monitoring instructions, to monitor the retail display of the electronic device for a plurality of security trigger events and, upon detection of any of the plurality of trigger events, lock a user interface of the electronic device; wherein the plurality of trigger events comprise a primary trigger event and a secondary trigger event; wherein: for the primary trigger event removal of the primary trigger event does not unlock the electronic device and performance of one or more additional steps is required to unlock the electronic device; and for the secondary trigger event removal of the secondary trigger event automatically unlocks the electronic device; and wherein each of the primary and secondary trigger events (224, 226) are defined by the security monitoring instructions such that the execution of the security monitoring instructions causes the processor to lock the user interface of the electronic device before removal of the electronic device from a retail site in which the retail display of the electronic device is provided.