Join our Newsletter — 33% off our NHI Course

Shared mobile devices in healthcare: what IAM teams are missing

 

(@nhi-mgmt-group)
Member Moderator
Joined: 1 year ago
Posts: 17435
Topic starter  

TL;DR: Mobile devices are now viewed as essential by 92% of healthcare leaders, with 99% expecting shared-device use to rise and 79% reporting credential sharing on those devices, according to Imprivata’s 2025 report. Shared mobility succeeds only when access, accountability, and workflow design are treated as one programme.

Editorial analysis by NHI Mgmt Group, based on content published by Imprivata: “Why shared mobile is the new gold standard in clinical workflow: From convenience to necessity”.

By the numbers:

  • 92% of healthcare leaders say mobile devices are essential tools in care facilities.
  • 99% expect the use of shared mobile devices to increase over the next two years.
  • 79% of employees share credentials on shared mobile devices.

Key questions

Q: What breaks when shared clinical devices are not tied to clear ownership?

A: When shared clinical devices lack clear ownership, organisations lose the ability to answer basic questions about who used the device, where it is, and what access it carried.

Q: Why do shared mobile devices create identity risk in clinical environments?

A: They create identity risk because multiple people use the same endpoint, so access state can outlive the person who initiated it.

Q: How should security teams reduce credential sharing on shared devices?

A: Security teams should replace slow, user-specific login flows with fast authentication methods that preserve accountability on shared endpoints.

Practitioner guidance

  • Define a shared-device assignment policy Replace first-come, first-served distribution with a formal assignment model that records who has custody of each device and when custody changes.
  • Enforce per-user authentication at each handoff Use tap-and-go or equivalent re-authentication so the next clinician must establish a fresh identity before accessing applications or records.
  • Eliminate credential sharing on shared devices Remove any process that allows staff to reuse credentials across shifts or departments, and make shared sessions attributable to a single named user.

Bottom line: Shared mobile devices are now part of the identity governance surface in healthcare, because access, attribution, and clinical speed depend on the same control model.

Explore further

View Full Forum →  |  NHI Foundation Course →  |  Our Services →  |  Read the full analysis →



   
Quote
(@mr-nhi)
Member Moderator
Joined: 6 months ago
Posts: 17367
 

Shared mobile is now a clinical identity governance problem, not a device procurement problem. The article makes clear that shared devices are useful because they fit the pace of care, but that utility only works when identity, session control, and assignment policy are treated as one operating model. That shifts the governance question from who owns the device to who is accountable for the access path. Practitioners should manage shared mobility as part of identity architecture, not endpoint logistics.

A question worth separating out:

Q: When do shared mobile workflows become a patient-data exposure problem?

A: They become an exposure problem when devices stay signed in, are reassigned informally, or are left unattended after use. At that point, the risk is not just lost hardware but unauthorised access to PHI through a live session that was never properly closed.

👉 Read our full editorial: Shared mobile devices are reshaping clinical identity governance



   
ReplyQuote
Share:

Free weekly newsletter

Subscribe to the NHI & AI Identity Journal

The latest on NHI and Agentic AI security – articles, research, breaches, news and events every week.

Bonus 33% off our NHI Course when you subscribe.