It’s definitely this; likely has iOS that has a security exploit and the device compliance audit flagged something. Soon enough her IT dept will be (or already has sent) sending her emails to update her device or her access will be denied at some point in the nearby future