IT Security Policy Paper

IT Security PolicyIn the Healthcare industry implementation of security policies is important to remain compliant with Food and Drug Administration (FDA) regulations. For Information Technology specifically, security policies often are associated with IT Security guidelines, rules and parameters users of devices attached to the corporate network must operate within. In order to gain a better understanding of how security policies are implemented and enforced in the Healthcare industry, an interview was conducted with an IT Security Analyst working for a CRO focusing on Clinical Research. The discussion included a focus on the Mobile Device Management (MDM) system used to enforce security policies on mobile devices attempting to attach to the …show more content…
As you can see, mobile device data encryption can apply to all date on the device or only certain file types. It is also possible to force encryption of removable media such as Secure Digital (SD) cards.Table 2: Screen shot for Modifying Security Policy in MDM Admin Console, Data Encryption.In order to remotely wipe and erase all data from a corporate mobile device an IT Security Analyst completes a process in the MDM Admin Console as outlined in Figure 3 below.By executing this process, the IT Security Analyst assumes control of the mobile device in order to remotely wipe ALL data to ensure no breach of data security is incurred by for the corporation. It is important to frequently test this procedure to ensure the wipe action does indeed occur, and ALL data is removed from the device …show more content…
The analyst assists the organization in ensuring corporate security policies surrounding mobile devices are defined, enforced and implemented to exercise control over corporate data. First and foremost, the IT Security Analyst must fully understand the security policies needed by the business while also understanding how to enforce them using technologies such as Mobile Device Management, MDM. Through creation of security policy forms in the MDM interface the IT Security Analyst ensures that any mobile devices configured to connect to the system will receive the password and data encryption security policies as defined. If for any reason a mobile device is non-compliant with policy, the IT Security Analyst can take necessary actions to bring the device into compliance or exclude it from accessing potentially sensitive corporate data. Finally, if mobile devices are lost or stolen that belong to the corporation, the IT Security Analyst can use the MDM interface to remotely wipe the device to ensure any data residing on the physical device is