Mobile Health Implementation

Security Risks

• assume built in security is not adequate which places the problem on the device itself.

• Fragmentation - diversity of mobile products in the marketplace

vendors lack experience with security measures across multiple mobile devices.

Security Measures

Because of the proliferation and variety of mobile devices being used in the healthcare industry, it is that much more important to understand the precautions that must be in place in order to comply with the standards required by HIPAA.

white paper

The Journal of AHIMA has publish safeguards against loss or theft of your mobile device. These safeguards include:

• Never leaving mobile devices unattended.
• Identify your mobile device by affixing a business card or ID tag to it
• Invest in a tether or cable lock to secure your laptop to something stationary such as airport seating or and office desk
• Install office security cameras to deter over-confident thieves
• Minimize the amount of sensitive information on the device
• Protect USB storage devices with passwords
• Disable USB ports
• Turn off wireless file transfer capabilities
• Password protect the BIOS to prevent disk access through changing the BIOS configuration
• Create a user account password and remvove guest accounts
• Require manual log on for VPN connection
• Invest in tracking software
• Encrypt the file system
• Use a firewall when accessing public/private networks

http://journal.ahima.org/2011/07/19/low-tech-security-risks-still-leading-cause-of-breaches/

Evaluating Mobile Technology

HIPAA Guidance Online Tech white paper

Mobility Trends in Healthcare

Aruba Networks, Inc conducted a survey...

References

http://www.nist.gov/nstic/

http://mobihealthnews.com/10747/how-mobile-health-can-abide-by-hipaa/

http://www.arubanetworks.com/pdf/solutions/HIMSSSurvey_2012.pdf