A method of controlling a mobile computing device, the method comprising: receiving wirelessly at an interface of the mobile computing device, a first control policy for storage in a memory of the mobile computing device when the mobile computing device is in a powered-off state and in range of a first antenna; receiving wirelessly at the interface of the mobile computing device, a second control policy for storage in the memory of the mobile computing device when the mobile computing device is in a powered-off state and in range of a second antenna, wherein the first control policy stored in the memory is overwritten when the second control policy is received and stored in the memory; enforcing the second control policy to control operation of the mobile computing device, when the mobile computing device is in a powered-on state and is outside an antenna range for wirelessly receiving any control policy; evaluating, upon power-up, the control policy for validity, said evaluation being performed by a bootloader of the mobile computing device that controls a processor of the mobile computing device to retrieve the control policy from the memory and evaluate it for expired, corrupted or malicious code, data or instructions; controlling the mobile computing device to enter a powered-off state or a default pre-configured state when no valid control policy is stored in the memory, the mobile computing device is in the powered-on state, and the mobile computing device is outside an antenna range for wirelessly receiving any control policy; and controlling, upon power-up, the mobile computing device to return to the powered-off state when the evaluated control policy is invalid and in case a threshold number of invalid control policies is not exceeded. receiving wirelessly at an interface of the mobile computing device, a first control policy for storage in a memory of the mobile computing device when the mobile computing device is in a powered-off state and in range of a first antenna; receiving wirelessly at the interface of the mobile computing device, a second control policy for storage in the memory of the mobile computing device when the mobile computing device is in a powered-off state and in range of a second antenna, wherein the first control policy stored in the memory is overwritten when the second control policy is received and stored in the memory; enforcing the second control policy to control operation of the mobile computing device, when the mobile computing device is in a powered-on state and is outside an antenna range for wirelessly receiving any control policy; evaluating, upon power-up, the control policy for validity, said evaluation being performed by a bootloader of the mobile computing device that controls a processor of the mobile computing device to retrieve the control policy from the memory and evaluate it for expired, corrupted or malicious code, data or instructions; controlling the mobile computing device to enter a powered-off state or a default pre-configured state when no valid control policy is stored in the memory, the mobile computing device is in the powered-on state, and the mobile computing device is outside an antenna range for wirelessly receiving any control policy; and controlling, upon power-up, the mobile computing device to return to the powered-off state when the evaluated control policy is invalid and in case a threshold number of invalid control policies is not exceeded.