Shared mobile device governance has become an identity control problem, not a device management problem. The article makes clear that clinical mobility is now operationally essential, but that does not reduce the need for governance. When a device is shared, access ownership, session state, and accountability must be explicit or the control plane collapses into convenience.
A question worth separating out:
Q: What should hospitals do first when shared mobile devices are essential but control is weak?
A: Start by defining ownership for allocation, sign-in state, and handoff responsibility. Once those responsibilities are explicit, organisations can enforce session cleanup, reduce credential sharing, and stop treating shared devices as unmanaged conveniences.
👉 Read our full editorial: Shared mobile device governance is lagging clinical adoption
Shared mobile governance is the real control plane, not the handset. The article makes a familiar but often ignored point: device strategy succeeds or fails on identity-driven governance, not on hardware count alone. In healthcare, the moment a shared device can be reassigned safely, audited cleanly, and locked down between users, it becomes a governed asset rather than an unmanaged convenience. The practitioner takeaway is that mobile strategy belongs inside IAM and lifecycle governance, not only endpoint management.
A few things that frame the scale:
- 72% of organisations have experienced or suspect they have experienced a breach of non-human identities -- 46% confirmed, 26% suspected, according to The 2024 ESG Report: Managing Non-Human Identities.
- Enterprises that have experienced a compromised NHI averaged 2.7 separate incidents in the past 12 months, according to The 2024 ESG Report: Managing Non-Human Identities.
A question worth separating out:
Q: Who should own shared mobile governance in a hospital?
A: Shared mobile governance should be owned jointly by IAM, security, and clinical operations, because the control problem spans access, device custody, and workflow readiness. If any one group owns it alone, the programme usually drifts into either poor usability or weak enforcement.
👉 Read our full editorial: Shared mobile devices expose the governance gap in healthcare IAM