Policy alone is not enough to assure that mobile devices used by hospital employees have proper security safeguards, says Beth Israel Deaconess Medical Center CIO John Halamka, M.D. in a recent blog post. Password protection, anti-malware protection and a timeout policy that resets any mobile device not used after 15 minutes are among several rules outlined by Halamka that he also shares with his employees at BIDMC. "It's clear to me that healthcare organizations have no choice but to reduce personal choice and personal freedom in order to keep our patient data safe," he says. Post