3.  Know what your team uses, and secure it appropriately.

Everybody has their favorites. Some people are diehard Evernote users. Some people prefer Android, and others wouldn't give up their iOS devices for the world. Kalember says that the time when a hospital can dictate the terms of what devices get used are over. It's also time to stop fearing the onslaught of mobile devices that staff want to sling in the workplace. "People who are using an iPad want to do so in a sanctioned way," says Kalember. "From an enterprise standpoint, they aren't doing what they need for security." He says that there are a lot of ways to approach this, but that many are still cumbersome. 

These strategies can range from mobile device management software where doctors have to "install special software that can control what apps are on them, what policy controls are on it," to using a virtual private network that entails "sending all of [a device's] traffic back home through the healthcare provider's network." These solutions, according to Kalember, are "very unsexy things to talk about." The solution? Kalember advocates for taking a "data centric approach," where "all of the contents would be encrypted, [and an] authorized viewer would have to authenticate to get access."