CIOs Cope with Personal iPads and Smartphones on Secure Networks

August 12, 2011 By Andy Opsahl

Calming Security Fears

Security issues regarding personal devices on a government network usually concern the downloading of health and human services data and tax-related documents. North Dakota doesn’t yet allow the ability to do so on personal devices. The data the state permits for download onto personal devices, Feldner said, is public record. However, her team still puts strict security protections on these personal handhelds, including special password protection. The devices also can be wiped remotely.

“Since people have their state e-mail on their devices, if they get stolen, we don’t want the culprit sending e-mails from that user’s account,” Feldner said. The application used for this protection wipes the device automatically after someone makes 10 failed password attempts.

Delaware, by contrast, allows sensitive files on personal devices but installs special encryption to keep unapproved eyes from viewing the data. North Dakota uses this sort of encryption on state-issued laptops, which can be used for sensitive files. Although Feldner doesn’t do this for personal devices, she expects to hear requests for it eventually.

As for whether personal gadgets require additional information security personnel for the added work, Feldner said that hasn’t been the case. But it doesn’t mean her security officers are happy about allowing the devices.

“They’re not thrilled because it’s one more thing they have to try to keep ahead of,” Feldner said. “They understand that this is the way the world is moving, so we need to accommodate it and figure out a way to keep things secure.”

PREV 1 | 2 | 3 NEXT

You may use or reference this story with attribution and a link to
http://www.govtech.com/technology/CIOs-Personal-iPads-Smartphones-Secure-Networks.html

| More

Comments

Tom McQuillan | Commented August 15, 2011

My issue with personal devices on Government networks is FOIA. Each jurisdiction has to be compliant with FOIA requirements and Attorneys need to wiegh in on the issue of personal data on personal devices and government data on personal devices. I wonder who has addressed the FOIA issues and where that information resides. Thank you.

Bob Miller | Commented August 15, 2011

The Texas Att. Gen. has ruled that government business conducted on personal devices is covered by FOIA. Do not know if other states or the feds have same kind of ruling.