The Register® — Biting the hand that feeds IT

Feeds

NHS mobile data security is pants

Safe in their hands?

Ensure Ease of Recovery with Asigra’s Agentless Software

Sensitive medical and personal details are in danger of exposure because of lax data security among health sector workers, according to a new survey.

The study, sponsored by mobile security firm Pointsec, found that almost two thirds of health sector workers use inadequate security. Half of those in the NHS use their own mobile devices to store data, a basic breach of security practice.

The Mobile device usage in the health care sector survey carried out by Pointsec and the British Journal of Healthcare Computing & Information Management also found found that one-fifth of the devices used to store data have no security on them at all. A further 40 per cent have only password-controlled access that would be easy for a skilled hacker to defeat using a dictionary-style attack.

Only a quarter of respondents used passwords in conjunction with other security features such as encryption, biometrics, smart card and two-factor authentication. The 117 participants in the survey included information managers, IT managers and medical professionals in the NHS. A quarter of those who took part in the study supplied equipment to the health care sector.

USB memory sticks or cards (76 per cent) were often used to download data among health care pros, followed by laptops (69 per cent), PDA/Blackberry (51 per cent), smartphones (nine per cent) and mobile phones (two per cent). Almost half (42 per cent) of respondents owned at least one of the devices they used.

These mobile devices were commonly used to store work contact details (75 per cent), but nearly two thirds stored corporate data, and one in five used mobile devices to store security details, such as passwords and PIN codes. About half of the medical professionals surveyed stored patient records on mobile devices, a potentially serious risk to patient confidentiality given that a quarter of respondents have admitted losing a mobile device.

Pointsec says its survey is evidence that inadequate security procedures are allowing mobile devices to "fall through the security net". It advises wider use of mobile encryption technologies, a business Pointsec itself specialises in. ®

Agentless Backup is Not a Myth

More from The Register

SCO vs. IBM battle resumes over ownership of Unix
Zombie lawsuit back and wants to suck the brains out of Linux
 breaking news
NSA whistleblower to tech firms, Obama: 'Grow a pair!'
Ed Snowden: Email tracking grabs 'IPs, raw data, content, headers, attachments, everything'
 breaking news
Ecuador: All right, Julian, you CAN stay on our sofa - it's your human right
Minister and Wikileaker share cosy chat in tiny London flat
Google flings another £1m at online child sex abuse vid CRACKDOWN
See, see, we're trying, ad giant tells Daily Mail UK.gov
 breaking news
NSA PRISM-gate: Relax, GCHQ spooks 'keep us safe', says Cameron
Whatever they are up to, it's all above board, we're told
PRISM snitch claims NSA hacked Chinese targets since 2009
Snowden suddenly looks safer in Hong Kong after revelations
 breaking news
US chief spook: Look, we only want to spy on 6.66 BEELLLION of you
Americans assured they are not in the NSA's sights
NSA: We COULD track you by your phone ... if we WANTED to
Honestly, too much work, can't be bothered