LA HIPAA EHR Conference 2012 - Rewards and Risks of …...More Numbers () 36% of social media users...
Transcript of LA HIPAA EHR Conference 2012 - Rewards and Risks of …...More Numbers () 36% of social media users...
![Page 1: LA HIPAA EHR Conference 2012 - Rewards and Risks of …...More Numbers () 36% of social media users post brand-related content 2 out of 3 social media users believe Twitter influences](https://reader033.fdocuments.in/reader033/viewer/2022051918/600b122360ac7f461332a469/html5/thumbnails/1.jpg)
Tony Brooks, CISAPrincipal & Director of IT Assurance and Risk ServicesHORNE [email protected]
January 20, 2011
The Risks and Rewards of Social Media and Mobile Devices
October 29 - 30, 2012
Tony Brooks, CISA, CRISCPartner - IT Assurance and Risk ServicesHORNE LLP
![Page 2: LA HIPAA EHR Conference 2012 - Rewards and Risks of …...More Numbers () 36% of social media users post brand-related content 2 out of 3 social media users believe Twitter influences](https://reader033.fdocuments.in/reader033/viewer/2022051918/600b122360ac7f461332a469/html5/thumbnails/2.jpg)
The Risk and Rewards of Social Media and Mobile Devices
Social Media Overview Social Media Rewards and Risks Mitigating Social Media Risks
Mobile Device Overview Mobile Device Rewards and Risks Mitigating Mobile Device Risks
2
![Page 3: LA HIPAA EHR Conference 2012 - Rewards and Risks of …...More Numbers () 36% of social media users post brand-related content 2 out of 3 social media users believe Twitter influences](https://reader033.fdocuments.in/reader033/viewer/2022051918/600b122360ac7f461332a469/html5/thumbnails/3.jpg)
Social Media Overview
3
![Page 4: LA HIPAA EHR Conference 2012 - Rewards and Risks of …...More Numbers () 36% of social media users post brand-related content 2 out of 3 social media users believe Twitter influences](https://reader033.fdocuments.in/reader033/viewer/2022051918/600b122360ac7f461332a469/html5/thumbnails/4.jpg)
Social Media Overview
What is Social Media?
Various forms of electronic communication through which users create online communities to share information, ideas, personal messages, and other content
4
![Page 5: LA HIPAA EHR Conference 2012 - Rewards and Risks of …...More Numbers () 36% of social media users post brand-related content 2 out of 3 social media users believe Twitter influences](https://reader033.fdocuments.in/reader033/viewer/2022051918/600b122360ac7f461332a469/html5/thumbnails/5.jpg)
Social Media Overview
5
Social Media Universe
Much more expansive than many
imagine
Source: http://www.theconversationprism.com/
![Page 6: LA HIPAA EHR Conference 2012 - Rewards and Risks of …...More Numbers () 36% of social media users post brand-related content 2 out of 3 social media users believe Twitter influences](https://reader033.fdocuments.in/reader033/viewer/2022051918/600b122360ac7f461332a469/html5/thumbnails/6.jpg)
Social Media Overview
The Numbers Facebook – 1 billion accounts Twitter – 465 million accounts MySpace – 262 million accounts LinkedIn – 145 million accounts Foursquare – 20 million users WordPress – 56 million sites YouTube – 4 billion video views daily Over 2.8 billion social media profiles,
representing around half of all internet users worldwide
6
![Page 7: LA HIPAA EHR Conference 2012 - Rewards and Risks of …...More Numbers () 36% of social media users post brand-related content 2 out of 3 social media users believe Twitter influences](https://reader033.fdocuments.in/reader033/viewer/2022051918/600b122360ac7f461332a469/html5/thumbnails/7.jpg)
More Numbers (www.thesocialskinny.com)
36% of social media users post brand-related content 2 out of 3 social media users believe Twitter influences
purchases 50% of people follow brands in social media 75% of companies now use Twitter as a marketing channel 41 percent of the class of 2011 used social media in their job
search One in three small businesses are now using social media 38% of CEOs label social media a high priority, and 57% of
businesses plan to hike their social media spend in 2012
Social Media Overview
7
Source: http://thesocialskinny.com/100-more-social-media-statistics-for-2012/
![Page 8: LA HIPAA EHR Conference 2012 - Rewards and Risks of …...More Numbers () 36% of social media users post brand-related content 2 out of 3 social media users believe Twitter influences](https://reader033.fdocuments.in/reader033/viewer/2022051918/600b122360ac7f461332a469/html5/thumbnails/8.jpg)
Social Media Overview
8
Generational Differences
Source: http://socialmediatoday.com/823021/social-media-and-generation-divide
![Page 9: LA HIPAA EHR Conference 2012 - Rewards and Risks of …...More Numbers () 36% of social media users post brand-related content 2 out of 3 social media users believe Twitter influences](https://reader033.fdocuments.in/reader033/viewer/2022051918/600b122360ac7f461332a469/html5/thumbnails/9.jpg)
Social Media Overview
9
Generational Differences
Source: http://socialmediatoday.com/823021/social-media-and-generation-divide
Personal Info60% bothered by the amount of their personal information on the Internet
![Page 10: LA HIPAA EHR Conference 2012 - Rewards and Risks of …...More Numbers () 36% of social media users post brand-related content 2 out of 3 social media users believe Twitter influences](https://reader033.fdocuments.in/reader033/viewer/2022051918/600b122360ac7f461332a469/html5/thumbnails/10.jpg)
Social Media Overview
10
Generational Differences
Source: http://socialmediatoday.com/823021/social-media-and-generation-divide
Want to remain anonymous10% of Gen Y14% of Gen X
22% of Boomers
![Page 11: LA HIPAA EHR Conference 2012 - Rewards and Risks of …...More Numbers () 36% of social media users post brand-related content 2 out of 3 social media users believe Twitter influences](https://reader033.fdocuments.in/reader033/viewer/2022051918/600b122360ac7f461332a469/html5/thumbnails/11.jpg)
Social Media Overview
11
Generational Differences
Source: http://socialmediatoday.com/823021/social-media-and-generation-divide
Gen Y on Social• 70% Post About Daily Activities• 60% Use Check-In Apps• 71% Friend Coworkers• 40% Allow Anyone to View
Personal Information
![Page 12: LA HIPAA EHR Conference 2012 - Rewards and Risks of …...More Numbers () 36% of social media users post brand-related content 2 out of 3 social media users believe Twitter influences](https://reader033.fdocuments.in/reader033/viewer/2022051918/600b122360ac7f461332a469/html5/thumbnails/12.jpg)
Social Media Rewards and Risks
12
![Page 13: LA HIPAA EHR Conference 2012 - Rewards and Risks of …...More Numbers () 36% of social media users post brand-related content 2 out of 3 social media users believe Twitter influences](https://reader033.fdocuments.in/reader033/viewer/2022051918/600b122360ac7f461332a469/html5/thumbnails/13.jpg)
For Businesses Establish a brand and raise awareness Bring attention to products and services Increase customer loyalty and trust Listen to customer opinions Conduct market research Conduct competitor research Strengthen customer service Manage reputation
Social Media Rewards
13
Source: http://www.sitepronews.com/2011/02/13/top-14-benefits-of-social-media-marketing/
![Page 14: LA HIPAA EHR Conference 2012 - Rewards and Risks of …...More Numbers () 36% of social media users post brand-related content 2 out of 3 social media users believe Twitter influences](https://reader033.fdocuments.in/reader033/viewer/2022051918/600b122360ac7f461332a469/html5/thumbnails/14.jpg)
For Individuals Build your personal reputation Display your resume Find a job Showcase your talents and establish yourself as an expert Enhance your business contacts and enhance personal
relationships Share information with like-minded people Entertain yourself and others
Social Media Rewards
14
Source: http://www.sitepronews.com/2011/02/13/top-14-benefits-of-social-media-marketing/
![Page 15: LA HIPAA EHR Conference 2012 - Rewards and Risks of …...More Numbers () 36% of social media users post brand-related content 2 out of 3 social media users believe Twitter influences](https://reader033.fdocuments.in/reader033/viewer/2022051918/600b122360ac7f461332a469/html5/thumbnails/15.jpg)
Social Media Examples
15
Bus
ines
s
Source: http://www.facebook.com/HORNELLP?filter=3
![Page 16: LA HIPAA EHR Conference 2012 - Rewards and Risks of …...More Numbers () 36% of social media users post brand-related content 2 out of 3 social media users believe Twitter influences](https://reader033.fdocuments.in/reader033/viewer/2022051918/600b122360ac7f461332a469/html5/thumbnails/16.jpg)
Social Media Examples
16
Bus
ines
s
Source: https://twitter.com/HORNE_LLP
![Page 17: LA HIPAA EHR Conference 2012 - Rewards and Risks of …...More Numbers () 36% of social media users post brand-related content 2 out of 3 social media users believe Twitter influences](https://reader033.fdocuments.in/reader033/viewer/2022051918/600b122360ac7f461332a469/html5/thumbnails/17.jpg)
Social Media Examples
17
Bus
ines
s
Source: http://www.linkedin.com/company/horne-llp
![Page 18: LA HIPAA EHR Conference 2012 - Rewards and Risks of …...More Numbers () 36% of social media users post brand-related content 2 out of 3 social media users believe Twitter influences](https://reader033.fdocuments.in/reader033/viewer/2022051918/600b122360ac7f461332a469/html5/thumbnails/18.jpg)
Social Media Examples
18
Bus
ines
s
Source: http://www.coca-colaconversations.com/
![Page 19: LA HIPAA EHR Conference 2012 - Rewards and Risks of …...More Numbers () 36% of social media users post brand-related content 2 out of 3 social media users believe Twitter influences](https://reader033.fdocuments.in/reader033/viewer/2022051918/600b122360ac7f461332a469/html5/thumbnails/19.jpg)
Social Media Examples
19
Bus
ines
s
Source: http://blogs.basspro.com/
![Page 20: LA HIPAA EHR Conference 2012 - Rewards and Risks of …...More Numbers () 36% of social media users post brand-related content 2 out of 3 social media users believe Twitter influences](https://reader033.fdocuments.in/reader033/viewer/2022051918/600b122360ac7f461332a469/html5/thumbnails/20.jpg)
Social Media Examples
20
Per
sona
l
Source: http://www.yelp.com/yelpmobile
![Page 21: LA HIPAA EHR Conference 2012 - Rewards and Risks of …...More Numbers () 36% of social media users post brand-related content 2 out of 3 social media users believe Twitter influences](https://reader033.fdocuments.in/reader033/viewer/2022051918/600b122360ac7f461332a469/html5/thumbnails/21.jpg)
Social Media Examples
21
Per
sona
l
Source: http://pinterest.com/all/?category=gardening
![Page 22: LA HIPAA EHR Conference 2012 - Rewards and Risks of …...More Numbers () 36% of social media users post brand-related content 2 out of 3 social media users believe Twitter influences](https://reader033.fdocuments.in/reader033/viewer/2022051918/600b122360ac7f461332a469/html5/thumbnails/22.jpg)
Social Media Examples
22
Per
sona
l
Source: http://about.me/kraigward
![Page 23: LA HIPAA EHR Conference 2012 - Rewards and Risks of …...More Numbers () 36% of social media users post brand-related content 2 out of 3 social media users believe Twitter influences](https://reader033.fdocuments.in/reader033/viewer/2022051918/600b122360ac7f461332a469/html5/thumbnails/23.jpg)
Social Media Examples
23
Per
sona
l
Source: http://www.opresume.com/DevanALowe/about
![Page 24: LA HIPAA EHR Conference 2012 - Rewards and Risks of …...More Numbers () 36% of social media users post brand-related content 2 out of 3 social media users believe Twitter influences](https://reader033.fdocuments.in/reader033/viewer/2022051918/600b122360ac7f461332a469/html5/thumbnails/24.jpg)
Social Media Examples
24
Per
sona
l
Source: http://soundcloud.com/rjchevalier
![Page 25: LA HIPAA EHR Conference 2012 - Rewards and Risks of …...More Numbers () 36% of social media users post brand-related content 2 out of 3 social media users believe Twitter influences](https://reader033.fdocuments.in/reader033/viewer/2022051918/600b122360ac7f461332a469/html5/thumbnails/25.jpg)
Social Media Examples
25
Per
sona
l
Source: http://mommyadventures.net/
![Page 26: LA HIPAA EHR Conference 2012 - Rewards and Risks of …...More Numbers () 36% of social media users post brand-related content 2 out of 3 social media users believe Twitter influences](https://reader033.fdocuments.in/reader033/viewer/2022051918/600b122360ac7f461332a469/html5/thumbnails/26.jpg)
Social Media Use in Healthcare
26
Hospital 1200 have a social media presence 3800 do not yet use social media Popular social media avenues Facebook Twitter YouTube Foursquare Customized patient portals
Reasons for not using Potential HIPAA violations and public relations issues Lack of staff to understand and manage social media
Source: http://www.hospitalimpact.org/index.php/2012/08/22/social_media_strategies_for_risk_averse
![Page 27: LA HIPAA EHR Conference 2012 - Rewards and Risks of …...More Numbers () 36% of social media users post brand-related content 2 out of 3 social media users believe Twitter influences](https://reader033.fdocuments.in/reader033/viewer/2022051918/600b122360ac7f461332a469/html5/thumbnails/27.jpg)
Social Media Use in Healthcare
27
Patients 33% of consumers use social media for seeking or
sharing medical information 40% of individuals said social media affected their choice
of a provider or organization 45% said it would affect their decision to get a second
opinion 34% said it would influence their decision about taking a
certain medication 32% said it would affect their choice of a health insurance
plan
Source: http://www.fiercehealthcare.com/story/patients-choose-hospitals-based-social-media/2012-04-19
![Page 28: LA HIPAA EHR Conference 2012 - Rewards and Risks of …...More Numbers () 36% of social media users post brand-related content 2 out of 3 social media users believe Twitter influences](https://reader033.fdocuments.in/reader033/viewer/2022051918/600b122360ac7f461332a469/html5/thumbnails/28.jpg)
Social Media Healthcare Examples
28
Face
book
![Page 29: LA HIPAA EHR Conference 2012 - Rewards and Risks of …...More Numbers () 36% of social media users post brand-related content 2 out of 3 social media users believe Twitter influences](https://reader033.fdocuments.in/reader033/viewer/2022051918/600b122360ac7f461332a469/html5/thumbnails/29.jpg)
Social Media Healthcare Examples
29
Tw
itte
r
![Page 30: LA HIPAA EHR Conference 2012 - Rewards and Risks of …...More Numbers () 36% of social media users post brand-related content 2 out of 3 social media users believe Twitter influences](https://reader033.fdocuments.in/reader033/viewer/2022051918/600b122360ac7f461332a469/html5/thumbnails/30.jpg)
Social Media Healthcare Examples
30
Tw
itte
r
![Page 31: LA HIPAA EHR Conference 2012 - Rewards and Risks of …...More Numbers () 36% of social media users post brand-related content 2 out of 3 social media users believe Twitter influences](https://reader033.fdocuments.in/reader033/viewer/2022051918/600b122360ac7f461332a469/html5/thumbnails/31.jpg)
Social Media Healthcare Examples
31
Four
squa
re
![Page 32: LA HIPAA EHR Conference 2012 - Rewards and Risks of …...More Numbers () 36% of social media users post brand-related content 2 out of 3 social media users believe Twitter influences](https://reader033.fdocuments.in/reader033/viewer/2022051918/600b122360ac7f461332a469/html5/thumbnails/32.jpg)
Social Media Healthcare Examples
32
Pat
ient
Acc
ess
Source: http://www.informationweek.com/healthcare/mobile-wireless/11-super-mobile-medical-apps/240003081
![Page 33: LA HIPAA EHR Conference 2012 - Rewards and Risks of …...More Numbers () 36% of social media users post brand-related content 2 out of 3 social media users believe Twitter influences](https://reader033.fdocuments.in/reader033/viewer/2022051918/600b122360ac7f461332a469/html5/thumbnails/33.jpg)
For Businesses Consume network bandwidth Exposure to malicious software Loss of employee productivity Lack of control over posted content Misinformation Reputational damage
Customer service expectations not met Relationship damage Brand hijacking Regulatory violations (e.g., HIPAA, SEC)
Social Media Risks
33
![Page 34: LA HIPAA EHR Conference 2012 - Rewards and Risks of …...More Numbers () 36% of social media users post brand-related content 2 out of 3 social media users believe Twitter influences](https://reader033.fdocuments.in/reader033/viewer/2022051918/600b122360ac7f461332a469/html5/thumbnails/34.jpg)
For Individuals Exposing personal information leads to
identity theft and threats to physical safety Personal behavior negatively impacts
personal and professional image Misinformation leads to bad decisions
(“internet = expert” syndrome) Anonymity creates vulnerability Disconnecting from reality Relationship damage Copyright violations
Social Media Risks
34
![Page 35: LA HIPAA EHR Conference 2012 - Rewards and Risks of …...More Numbers () 36% of social media users post brand-related content 2 out of 3 social media users believe Twitter influences](https://reader033.fdocuments.in/reader033/viewer/2022051918/600b122360ac7f461332a469/html5/thumbnails/35.jpg)
Social Media Risk Examples
35Source: http://socialbarrel.com/facebook-hounded-by-privacy-issues/45165/
Source: http://mashable.com/2012/10/17/google-privacy-europe/
Source: http://www.ibtimes.com/reporters/jeff-stone
Privacy Concerns
![Page 36: LA HIPAA EHR Conference 2012 - Rewards and Risks of …...More Numbers () 36% of social media users post brand-related content 2 out of 3 social media users believe Twitter influences](https://reader033.fdocuments.in/reader033/viewer/2022051918/600b122360ac7f461332a469/html5/thumbnails/36.jpg)
Social Media Risk Examples
36
Bad News Communicated at Light Speed
Source: http://www.rawstory.com/rs/2012/10/02/disastrous-flights-sink-american-airlines-reputation/
![Page 37: LA HIPAA EHR Conference 2012 - Rewards and Risks of …...More Numbers () 36% of social media users post brand-related content 2 out of 3 social media users believe Twitter influences](https://reader033.fdocuments.in/reader033/viewer/2022051918/600b122360ac7f461332a469/html5/thumbnails/37.jpg)
Social Media Risk Examples
37
Disappointment CommunicatedTo the World
Sources: http://www.facebook.com/ and http://www.yelp.com
![Page 38: LA HIPAA EHR Conference 2012 - Rewards and Risks of …...More Numbers () 36% of social media users post brand-related content 2 out of 3 social media users believe Twitter influences](https://reader033.fdocuments.in/reader033/viewer/2022051918/600b122360ac7f461332a469/html5/thumbnails/38.jpg)
Social Media Risk Examples
38
Disappointment CommunicatedTo the World
![Page 39: LA HIPAA EHR Conference 2012 - Rewards and Risks of …...More Numbers () 36% of social media users post brand-related content 2 out of 3 social media users believe Twitter influences](https://reader033.fdocuments.in/reader033/viewer/2022051918/600b122360ac7f461332a469/html5/thumbnails/39.jpg)
Social Media Risk Examples
39
FacebookPost Impacts Career
Source: http://sports.yahoo.com/blogs/nfl-shutdown-corner/side-judge-pulled-saints-panthers-game-facebook-page-143323464--nfl.html
![Page 40: LA HIPAA EHR Conference 2012 - Rewards and Risks of …...More Numbers () 36% of social media users post brand-related content 2 out of 3 social media users believe Twitter influences](https://reader033.fdocuments.in/reader033/viewer/2022051918/600b122360ac7f461332a469/html5/thumbnails/40.jpg)
Social Media Risk Examples
40
Tweets Impact Image
Source: http://www.yardbarker.com/
![Page 41: LA HIPAA EHR Conference 2012 - Rewards and Risks of …...More Numbers () 36% of social media users post brand-related content 2 out of 3 social media users believe Twitter influences](https://reader033.fdocuments.in/reader033/viewer/2022051918/600b122360ac7f461332a469/html5/thumbnails/41.jpg)
Social Media Risks
41
Source: http://blogs.salesforce.com/company/2012/09/do-we-really-behave-badly-on-social-media.html
Neg
ativ
e C
onse
quen
ces
![Page 42: LA HIPAA EHR Conference 2012 - Rewards and Risks of …...More Numbers () 36% of social media users post brand-related content 2 out of 3 social media users believe Twitter influences](https://reader033.fdocuments.in/reader033/viewer/2022051918/600b122360ac7f461332a469/html5/thumbnails/42.jpg)
How to MitigateSocial Media Risks
42
![Page 43: LA HIPAA EHR Conference 2012 - Rewards and Risks of …...More Numbers () 36% of social media users post brand-related content 2 out of 3 social media users believe Twitter influences](https://reader033.fdocuments.in/reader033/viewer/2022051918/600b122360ac7f461332a469/html5/thumbnails/43.jpg)
Steps to Success Understand social media Understand rewards and risks Catalog current and proposed uses Perform a risk assessment Create a social media steering committee Develop a social media strategy and policy Communicate strategy and policy to employees Implement internal controls Monitor Internet activity Develop plan to respond to negative situations
Mitigating Social Media Risks
43
![Page 44: LA HIPAA EHR Conference 2012 - Rewards and Risks of …...More Numbers () 36% of social media users post brand-related content 2 out of 3 social media users believe Twitter influences](https://reader033.fdocuments.in/reader033/viewer/2022051918/600b122360ac7f461332a469/html5/thumbnails/44.jpg)
Key Policy Elements Business use: The scope of topics and type of information permitted The process to gain approval for use Permitted activities, including use in hiring Disallowed activities Legal and regulatory requirements and review Notices to consumers regarding terms of use and liability Persons responsible for management and inquiry response Escalation process for negative events
Mitigating Social Media Risks
44
![Page 45: LA HIPAA EHR Conference 2012 - Rewards and Risks of …...More Numbers () 36% of social media users post brand-related content 2 out of 3 social media users believe Twitter influences](https://reader033.fdocuments.in/reader033/viewer/2022051918/600b122360ac7f461332a469/html5/thumbnails/45.jpg)
Key Policy Elements Personal use in the workplace: Is it allowed Nondisclosure of business-related content Discussion of workplace-related topics Inappropriate sites, content or conversations
Personal use outside the workplace: Nondisclosure of business-related content Standard disclaimers if identifying the employer The dangers of posting too much personal information Posting of info and photos that link to company
Mitigating Social Media Risks
45
![Page 46: LA HIPAA EHR Conference 2012 - Rewards and Risks of …...More Numbers () 36% of social media users post brand-related content 2 out of 3 social media users believe Twitter influences](https://reader033.fdocuments.in/reader033/viewer/2022051918/600b122360ac7f461332a469/html5/thumbnails/46.jpg)
Reputation Management
Mitigating Social Media Risks
46
Source: http://www.reputation.com/
![Page 47: LA HIPAA EHR Conference 2012 - Rewards and Risks of …...More Numbers () 36% of social media users post brand-related content 2 out of 3 social media users believe Twitter influences](https://reader033.fdocuments.in/reader033/viewer/2022051918/600b122360ac7f461332a469/html5/thumbnails/47.jpg)
Rep
utat
ion
Man
agem
ent
Mitigating Social Media Risks
47Source: http://www.reputation.com/
![Page 48: LA HIPAA EHR Conference 2012 - Rewards and Risks of …...More Numbers () 36% of social media users post brand-related content 2 out of 3 social media users believe Twitter influences](https://reader033.fdocuments.in/reader033/viewer/2022051918/600b122360ac7f461332a469/html5/thumbnails/48.jpg)
Mitigating Social Media Risks
48
Source: http://www.isaca.org
ISACA Guides
![Page 49: LA HIPAA EHR Conference 2012 - Rewards and Risks of …...More Numbers () 36% of social media users post brand-related content 2 out of 3 social media users believe Twitter influences](https://reader033.fdocuments.in/reader033/viewer/2022051918/600b122360ac7f461332a469/html5/thumbnails/49.jpg)
Mitigating Social Media Risks
49
Source: http://www.bits.org/publications/security/BITSSocialMediaJun2011.pdf
BIT
S /F
SRG
uide
![Page 50: LA HIPAA EHR Conference 2012 - Rewards and Risks of …...More Numbers () 36% of social media users post brand-related content 2 out of 3 social media users believe Twitter influences](https://reader033.fdocuments.in/reader033/viewer/2022051918/600b122360ac7f461332a469/html5/thumbnails/50.jpg)
Mitigating Social Media Risks
50
Source: http://info.publicintelligence.net/USAF-SocialMedia.pdf
Source: http://www.af.mil/shared/media/document/AFD-091210-043.pdf
USAF Guides
![Page 51: LA HIPAA EHR Conference 2012 - Rewards and Risks of …...More Numbers () 36% of social media users post brand-related content 2 out of 3 social media users believe Twitter influences](https://reader033.fdocuments.in/reader033/viewer/2022051918/600b122360ac7f461332a469/html5/thumbnails/51.jpg)
Mitigating Social Media Risks
51
Source: http://www.socialfish.org/wp-content/downloads/socialfish-policies-whitepaper.pdf
Polic
y Te
mpl
ate
![Page 52: LA HIPAA EHR Conference 2012 - Rewards and Risks of …...More Numbers () 36% of social media users post brand-related content 2 out of 3 social media users believe Twitter influences](https://reader033.fdocuments.in/reader033/viewer/2022051918/600b122360ac7f461332a469/html5/thumbnails/52.jpg)
Mitigating Social Media Risks
52
Source: http://ericschwartzman.com/pr/schwartzman/social-media-policy-template.aspx
Polic
y Te
mpl
ate
![Page 53: LA HIPAA EHR Conference 2012 - Rewards and Risks of …...More Numbers () 36% of social media users post brand-related content 2 out of 3 social media users believe Twitter influences](https://reader033.fdocuments.in/reader033/viewer/2022051918/600b122360ac7f461332a469/html5/thumbnails/53.jpg)
Mobile Devices Overview
53
![Page 54: LA HIPAA EHR Conference 2012 - Rewards and Risks of …...More Numbers () 36% of social media users post brand-related content 2 out of 3 social media users believe Twitter influences](https://reader033.fdocuments.in/reader033/viewer/2022051918/600b122360ac7f461332a469/html5/thumbnails/54.jpg)
Mobile Device Overview
What is a Mobile Device?
A mobile (computing) device is exactly what the name implies –a computing device that is portable.
Examples include: Laptop computers Netbook computers Tablet computers Personal Digital Assistants Smartphones
54
![Page 55: LA HIPAA EHR Conference 2012 - Rewards and Risks of …...More Numbers () 36% of social media users post brand-related content 2 out of 3 social media users believe Twitter influences](https://reader033.fdocuments.in/reader033/viewer/2022051918/600b122360ac7f461332a469/html5/thumbnails/55.jpg)
Mobile Device Overview
Mobile DeviceCommunication
Mobile devices use a variety of communications technologies, including: WiFi Bluetooth Cellular Ethernet
55
![Page 56: LA HIPAA EHR Conference 2012 - Rewards and Risks of …...More Numbers () 36% of social media users post brand-related content 2 out of 3 social media users believe Twitter influences](https://reader033.fdocuments.in/reader033/viewer/2022051918/600b122360ac7f461332a469/html5/thumbnails/56.jpg)
Mobile Device Overview
The Numbers
56
Source: http://www.smartplanet.com/blog/business-brains/milestone-more-smartphones-than-pcs-sold-in-2011/21828
WORLDWIDE SMARTPHONE AND PC SHIPMENTSShipments and growth rates by category
Category
Q4 2011 Shipments
(millions)Growth
Q4 ‘11/Q4’10
Full Year 2011 Shipments
(millions)Growth
2011/2010
Smart phones 158.5 56.6% 487.7 62.7%
PCs 120.2 16.3% 414.6 14.8%• Tablets/Pads 26.5 186.2% 63.2 274.1%• Netbooks 6.7 -32.4% 29.4 -25.3%• Notebooks 57.9 7.3% 209.6 7.5%• Desktops 29.1 -3.6% 112.4 2.3%
Source: Canalys Estimates © Canalys 2012
![Page 57: LA HIPAA EHR Conference 2012 - Rewards and Risks of …...More Numbers () 36% of social media users post brand-related content 2 out of 3 social media users believe Twitter influences](https://reader033.fdocuments.in/reader033/viewer/2022051918/600b122360ac7f461332a469/html5/thumbnails/57.jpg)
For Businesses Anytime, anywhere access to information Anytime, anywhere ability to communicate Improve customer service Make and accept payments Take and send photos Manage logistics Scan and track inventory Give presentations
Mobile Device Rewards
57
![Page 58: LA HIPAA EHR Conference 2012 - Rewards and Risks of …...More Numbers () 36% of social media users post brand-related content 2 out of 3 social media users believe Twitter influences](https://reader033.fdocuments.in/reader033/viewer/2022051918/600b122360ac7f461332a469/html5/thumbnails/58.jpg)
For Individuals Anytime, anywhere access to information Anytime, anywhere ability to communicate Conduct online banking Monitor financial transactions Facilitate and enhance shopping Take and send photos Entertain yourself and others
Mobile Device Rewards
58
![Page 59: LA HIPAA EHR Conference 2012 - Rewards and Risks of …...More Numbers () 36% of social media users post brand-related content 2 out of 3 social media users believe Twitter influences](https://reader033.fdocuments.in/reader033/viewer/2022051918/600b122360ac7f461332a469/html5/thumbnails/59.jpg)
Mobile App Examples
59
Per
sona
l
![Page 60: LA HIPAA EHR Conference 2012 - Rewards and Risks of …...More Numbers () 36% of social media users post brand-related content 2 out of 3 social media users believe Twitter influences](https://reader033.fdocuments.in/reader033/viewer/2022051918/600b122360ac7f461332a469/html5/thumbnails/60.jpg)
Mobile App Examples
60
Bus
ines
s
Source: https://www.trustmark.com/eservices/index.html
![Page 61: LA HIPAA EHR Conference 2012 - Rewards and Risks of …...More Numbers () 36% of social media users post brand-related content 2 out of 3 social media users believe Twitter influences](https://reader033.fdocuments.in/reader033/viewer/2022051918/600b122360ac7f461332a469/html5/thumbnails/61.jpg)
Mobile App Examples
61
Bus
ines
s
Source: http://www.shoestation.com/
![Page 62: LA HIPAA EHR Conference 2012 - Rewards and Risks of …...More Numbers () 36% of social media users post brand-related content 2 out of 3 social media users believe Twitter influences](https://reader033.fdocuments.in/reader033/viewer/2022051918/600b122360ac7f461332a469/html5/thumbnails/62.jpg)
62
Source: GARTNER REPORT http://www.itbusinessedge.com/slideshows/show.aspx?c=87261
Mobile Device Trends
![Page 63: LA HIPAA EHR Conference 2012 - Rewards and Risks of …...More Numbers () 36% of social media users post brand-related content 2 out of 3 social media users believe Twitter influences](https://reader033.fdocuments.in/reader033/viewer/2022051918/600b122360ac7f461332a469/html5/thumbnails/63.jpg)
Mobile Device Use in Healthcare
63
Physicians 67% of physicians use smartphones Popular clinical apps Look up drug references (58 percent) Accessing clinical decision-support (50 percent) Taking notes and memos (43 percent) Digging into textbook references (38 percent) Consulting with medical peers (28 percent) Performing scheduling tasks (17 percent) E-prescribing (8 percent) Monitoring patients (6 percent) Accessing electronic medical records (6 percent) Ordering lab tests or accessing results (4 percent)
Source: http://www.fiercemobilehealthcare.com/story/smartphone-use-growing-among-family-docs/2012-06-11
![Page 64: LA HIPAA EHR Conference 2012 - Rewards and Risks of …...More Numbers () 36% of social media users post brand-related content 2 out of 3 social media users believe Twitter influences](https://reader033.fdocuments.in/reader033/viewer/2022051918/600b122360ac7f461332a469/html5/thumbnails/64.jpg)
Mobile App Healthcare Examples
64
Pat
ient
Acc
ess
Source: http://go.kaiserpermanente.org/family
![Page 65: LA HIPAA EHR Conference 2012 - Rewards and Risks of …...More Numbers () 36% of social media users post brand-related content 2 out of 3 social media users believe Twitter influences](https://reader033.fdocuments.in/reader033/viewer/2022051918/600b122360ac7f461332a469/html5/thumbnails/65.jpg)
Mobile App Healthcare Examples
65
Med
ical
App
s
Source: http://www.informationweek.com/healthcare/mobile-wireless/11-super-mobile-medical-apps/240003081
SURGERY ILLUSTRATOR
DIAGNOSISASTHMA MONITOR
![Page 66: LA HIPAA EHR Conference 2012 - Rewards and Risks of …...More Numbers () 36% of social media users post brand-related content 2 out of 3 social media users believe Twitter influences](https://reader033.fdocuments.in/reader033/viewer/2022051918/600b122360ac7f461332a469/html5/thumbnails/66.jpg)
Mobile App Healthcare Examples
66
Med
ical
App
s
NEWS, REFERENCE, EDUCATION
Source: http://www.medscape.com/public/iphone
DRUG REFERENCE
Source: http://epocrates.com
PATIENT EDUCATION
Source: http://www.emmisolutions.com
![Page 67: LA HIPAA EHR Conference 2012 - Rewards and Risks of …...More Numbers () 36% of social media users post brand-related content 2 out of 3 social media users believe Twitter influences](https://reader033.fdocuments.in/reader033/viewer/2022051918/600b122360ac7f461332a469/html5/thumbnails/67.jpg)
Largest Security VulnerabilityFormer White House cybersecurity adviser Richard Clarke said that the growing trend of businesses allowing employees to use their personal mobile devices at work “is the newest and largest vulnerability in corporate America now.”
Source: http://www.confidenttechnologies.com/news_events/survey-shows-smartphone-users-choose-convenience-over-security
67
Mobile Device Risks
![Page 68: LA HIPAA EHR Conference 2012 - Rewards and Risks of …...More Numbers () 36% of social media users post brand-related content 2 out of 3 social media users believe Twitter influences](https://reader033.fdocuments.in/reader033/viewer/2022051918/600b122360ac7f461332a469/html5/thumbnails/68.jpg)
Mobile Device Risks
68
McAfee Threats Report: Second Quarter 2012
Source: http://www.mcafee.com/us/resources/reports/rp-quarterly-threat-q2-2012.pdf
![Page 69: LA HIPAA EHR Conference 2012 - Rewards and Risks of …...More Numbers () 36% of social media users post brand-related content 2 out of 3 social media users believe Twitter influences](https://reader033.fdocuments.in/reader033/viewer/2022051918/600b122360ac7f461332a469/html5/thumbnails/69.jpg)
Apple Device Security No viruses in the wild, iOS apps are sandboxed, hardware
encryption iPhone features to watch: Sync, iCloud, Find My Friends,
Passbook, Integration to Facebook
Link to Read: http://www.forbes.com/sites/timworstall/2012/06/04/apple-explains-why-ios-dont-need-no-steenkin-anti-virus/
69
Mobile Device Risks
![Page 70: LA HIPAA EHR Conference 2012 - Rewards and Risks of …...More Numbers () 36% of social media users post brand-related content 2 out of 3 social media users believe Twitter influences](https://reader033.fdocuments.in/reader033/viewer/2022051918/600b122360ac7f461332a469/html5/thumbnails/70.jpg)
Apple Device Security
Source: http://www.intego.com/virusbarrier-ios
70
Mobile Device Risks
![Page 71: LA HIPAA EHR Conference 2012 - Rewards and Risks of …...More Numbers () 36% of social media users post brand-related content 2 out of 3 social media users believe Twitter influences](https://reader033.fdocuments.in/reader033/viewer/2022051918/600b122360ac7f461332a469/html5/thumbnails/71.jpg)
Android Device Security
71
Mobile Device Risks
“According to several reports, cyber-crooks are targeting the Android operating system since it's essentially open and the sheer number of people using the platform makes it a worthwhile option. But there are still many people that don't believe Android security is a major threat to them. Those people need to wake up.”
Don Reisinger, eWeek
Source: http://www.eweek.com/c/a/Mobile-and-Wireless/Android-Security-Is-a-Major-Threat-10-Reasons-Why-148798/
![Page 72: LA HIPAA EHR Conference 2012 - Rewards and Risks of …...More Numbers () 36% of social media users post brand-related content 2 out of 3 social media users believe Twitter influences](https://reader033.fdocuments.in/reader033/viewer/2022051918/600b122360ac7f461332a469/html5/thumbnails/72.jpg)
Android Device Security
72
Mobile Device Risks
Source: http://tech.fortune.cnn.com/2012/10/15/fbi-issues-android-warning/
![Page 73: LA HIPAA EHR Conference 2012 - Rewards and Risks of …...More Numbers () 36% of social media users post brand-related content 2 out of 3 social media users believe Twitter influences](https://reader033.fdocuments.in/reader033/viewer/2022051918/600b122360ac7f461332a469/html5/thumbnails/73.jpg)
Secure Your Device Create a PIN or passcode for your device Validate the apps you load and sites you access Keep your firmware and apps updated Turn off WiFi, Bluetooth, and NFC when not in use Beware apps that enable Geo-Location services Encrypt sensitive data Do not jailbreak or root your device Back up your data (especially phone books and photos) Have a plan if your device is stolen Business/non-profit/govt. entities – install MDM software
73
Mitigating Mobile Device Risks
Source: http://blink.ucsd.edu/technology/phones/mobile/security.html Source: http://www.ic3.gov/media/2012/121012.aspx
![Page 74: LA HIPAA EHR Conference 2012 - Rewards and Risks of …...More Numbers () 36% of social media users post brand-related content 2 out of 3 social media users believe Twitter influences](https://reader033.fdocuments.in/reader033/viewer/2022051918/600b122360ac7f461332a469/html5/thumbnails/74.jpg)
74
Mitigating Mobile Device RisksM
DM
Source: http://www.air-watch.com/
![Page 75: LA HIPAA EHR Conference 2012 - Rewards and Risks of …...More Numbers () 36% of social media users post brand-related content 2 out of 3 social media users believe Twitter influences](https://reader033.fdocuments.in/reader033/viewer/2022051918/600b122360ac7f461332a469/html5/thumbnails/75.jpg)
75
Mitigating Mobile Device RisksM
DM
Source: http://www.mobileactivedefense.com/
![Page 76: LA HIPAA EHR Conference 2012 - Rewards and Risks of …...More Numbers () 36% of social media users post brand-related content 2 out of 3 social media users believe Twitter influences](https://reader033.fdocuments.in/reader033/viewer/2022051918/600b122360ac7f461332a469/html5/thumbnails/76.jpg)
76
Mitigating Mobile Device RisksM
DM
Source: http://www.mobileiron.com/
![Page 77: LA HIPAA EHR Conference 2012 - Rewards and Risks of …...More Numbers () 36% of social media users post brand-related content 2 out of 3 social media users believe Twitter influences](https://reader033.fdocuments.in/reader033/viewer/2022051918/600b122360ac7f461332a469/html5/thumbnails/77.jpg)
77
Mitigating Mobile Device RisksM
DM
Source: http://www.mobileiron.com/
![Page 78: LA HIPAA EHR Conference 2012 - Rewards and Risks of …...More Numbers () 36% of social media users post brand-related content 2 out of 3 social media users believe Twitter influences](https://reader033.fdocuments.in/reader033/viewer/2022051918/600b122360ac7f461332a469/html5/thumbnails/78.jpg)
GARTNER – Critical Capabilities for Mobile Device Management Device Diversity Support one or more OS platforms, such as Android, iOS, RIM,
Windows. Support for tablets Support for ruggedized devices Support for simpler phones
78
Mobile Device Management
Source: http://forms.zenprise.com/LP=203?elqCampaignId=-3
![Page 79: LA HIPAA EHR Conference 2012 - Rewards and Risks of …...More Numbers () 36% of social media users post brand-related content 2 out of 3 social media users believe Twitter influences](https://reader033.fdocuments.in/reader033/viewer/2022051918/600b122360ac7f461332a469/html5/thumbnails/79.jpg)
GARTNER – Critical Capabilities for Mobile Device Management Policy Enforcement Enforce policies on eligible devices:
Detect OS platforms and versions, installed applications, and manipulated data
Detect jail-broken iOS devices and rooted Android devices Filter (restrict) access from noncompliant devices to corporate
servers (e.g., email) Enforce application policies:
Restrict downloadable applications through whitelists and blacklists. Monitor access to app stores and application downloads, and put
prohibited applications on quarantine Monitor access to Web services, social networks and app stores
79
Mobile Device Management
![Page 80: LA HIPAA EHR Conference 2012 - Rewards and Risks of …...More Numbers () 36% of social media users post brand-related content 2 out of 3 social media users believe Twitter influences](https://reader033.fdocuments.in/reader033/viewer/2022051918/600b122360ac7f461332a469/html5/thumbnails/80.jpg)
Mobile Device Management
GARTNER – Critical Capabilities for Mobile Device Management Policy Enforcement (continued) Enforce mobile communications expense policies:
Monitor roaming usage. Detect policy violations (e.g., international roaming)
Enforce separation of personal versus corporate content: Manage corporate apps on personal devices, and personal apps on
corporate devices Tag content as personal or corporate through flags Detect violations of separation If a container is in use, prohibit exporting data outside the container
(e.g., when opening an email attachment), and regulate interaction between different enterprise containers
Restrict or prohibit access to servers in case of a violation
80
![Page 81: LA HIPAA EHR Conference 2012 - Rewards and Risks of …...More Numbers () 36% of social media users post brand-related content 2 out of 3 social media users believe Twitter influences](https://reader033.fdocuments.in/reader033/viewer/2022051918/600b122360ac7f461332a469/html5/thumbnails/81.jpg)
GARTNER – Critical Capabilities for Mobile Device Management Security and Compliance Password enforcement (strong alphanumeric password) Device lock (after a given number of minutes of inactivity) Remote wipe, selective remote wipe (e.g., only corporate content); total
remote wipe (hard wipe, data not recoverable after deletion) Local data encryption (phone memory, external memory cards) Certificate-based authentication (include device ID, OS version, phone
number); certificate distribution Monitoring device and data manipulation on device Rogue app protection (e.g., application quarantine) Firewall, Antivirus, Mobile VPN Message archiving (SMS, IM, email, etc.) and retrieval; record historical
event for audit trail and reporting
81
Mobile Device Management
![Page 82: LA HIPAA EHR Conference 2012 - Rewards and Risks of …...More Numbers () 36% of social media users post brand-related content 2 out of 3 social media users believe Twitter influences](https://reader033.fdocuments.in/reader033/viewer/2022051918/600b122360ac7f461332a469/html5/thumbnails/82.jpg)
GARTNER – Critical Capabilities for Mobile Device Management Containerization (separate corporate from private content) Local data encryption On-the-fly decryption Selective remote wipe No data export to other containers (data leakage prevention) Controlled communication among containers Application containerization (beyond email)
82
Mobile Device Management
![Page 83: LA HIPAA EHR Conference 2012 - Rewards and Risks of …...More Numbers () 36% of social media users post brand-related content 2 out of 3 social media users believe Twitter influences](https://reader033.fdocuments.in/reader033/viewer/2022051918/600b122360ac7f461332a469/html5/thumbnails/83.jpg)
GARTNER – Critical Capabilities for Mobile Device Management Inventory Management Asset management and inventory Device configuration and imaging Device activation and deactivation Provisioning Lockdown hardware features Monitoring:
Performance, battery life, memory Lost-phone recovery
Locate and map; restore and migrate
83
Mobile Device Management
![Page 84: LA HIPAA EHR Conference 2012 - Rewards and Risks of …...More Numbers () 36% of social media users post brand-related content 2 out of 3 social media users believe Twitter influences](https://reader033.fdocuments.in/reader033/viewer/2022051918/600b122360ac7f461332a469/html5/thumbnails/84.jpg)
GARTNER – Critical Capabilities for Mobile Device Management Software Distribution Application discovery (e.g., through private app stores) Software updates, for applications or OSs Patches/fixes Backup/restore Background synchronization File distribution
84
Mobile Device Management
![Page 85: LA HIPAA EHR Conference 2012 - Rewards and Risks of …...More Numbers () 36% of social media users post brand-related content 2 out of 3 social media users believe Twitter influences](https://reader033.fdocuments.in/reader033/viewer/2022051918/600b122360ac7f461332a469/html5/thumbnails/85.jpg)
QUESTIONS AND CONCLUSION
85
![Page 86: LA HIPAA EHR Conference 2012 - Rewards and Risks of …...More Numbers () 36% of social media users post brand-related content 2 out of 3 social media users believe Twitter influences](https://reader033.fdocuments.in/reader033/viewer/2022051918/600b122360ac7f461332a469/html5/thumbnails/86.jpg)
Tony Brooks, CISAPrincipal & Director of IT Assurance and Risk ServicesHORNE [email protected]
January 20, 2011
The Risks and Rewards of Social Media and Mobile Devices
October 29 - 30, 2012
Tony Brooks, CISA, CRISCPartner - IT Assurance and Risk ServicesHORNE LLP