This paper investigates the main challenges companies face when implementing information-security practices during the development of mobile applications in corporate environments. The methodology combines a literature review with a case study conducted at a Brazilian software-development firm. We analyzed common vulnerabilities, security best practices, and compliance with the Brazilian General Data Protection Law (LGPD). The study identified well-known challenges such as authentication and cryptography, as well as issues specific to enterprise contexts, including controlling authorized devices and periodically renewing biometric authentication. The adopted solutions highlight the importance of aligning technical measures with organizational realities, underscoring the need for an integrated approach to ensure security throughout the mobile-development life cycle.