Imagine a health system that focuses on health, not just health care.

Imagine a sustainable health system with one goal: to improve the lives of the people and communities we serve, for generations to come. That is Dartmouth-

Hitchcock.

In a healthcare environment

Telecommunications - BYOD

Privacy

           HIPAA - The Health Insurance Portability and Accountability Act            Protects the privacy of individually identifiable health information; the HIPAA Security Rule, which sets national standards for the security of electronic protected health information; the HIPAA Breach Notification Rule, which requires covered entities and business associates to provide notification following a breach of unsecured protected health information; and the confidentiality provisions of the Patient Safety Rule, which protect identifiable information being used to analyze patient safety events and improve patient safety.              HITECH - The Health Information Technology for Economic and Clinical Health Act            Subtitle D of the HITECH Act addresses the privacy and security concerns associated with the electronic transmission of health information, in part, through several provisions that strengthen the civil and criminal enforcement of the HIPAA rules.             HITRUST - Health Information Trust Alliance            In collaboration with healthcare, technology and information security leaders, has established a Common Security Framework (CSF)that can be used by all organizations that create, access, store or exchange sensitive and/or regulated data. The CSF includes a prescriptive set of controls that seek to harmonize the requirements of multiple regulations and standards.

Wireless Devices

Total = 6,600

Enterprise = 4,600

BYOD = 2,000

Android not allowed to connect to Enterprise Exchange Accounts and must connect to the Guest WiFi

iOS and Windows OK

For Comparison

Employees = 12,000

Pagers = 7,000

Main Campus Telephone drops = 11,000 (Does not include 11 external buildings or Southern Region)

Policy

Required Signed Electronic User Agreements

- Laptop Responsibility

- Mobile Device Responsibility

- Network Access for Personal Devices

- Remote Access

End User Concerns

Security awareness and practice

Updating security patches (OS, Applications)

Enterprise Mobile Management (EMM) Mobile Device Management (MDM)

Updating security patches (OS, Applications)

Enterprise and personal data containers (segmented storage)

Enterprise application provisioning

Remote wipe

Support - $$$

End User Support

Administration

Security monitoring