Edit filter log

[ 0 => 'One of the most significant trends in enterprise currently is for employees to use their own smartphones and tablets to access corporate applications. Mobile devices have become a critical issue for IT departments in organizations of all sizes because of security risks that may arise and legal compliance. There has been an outreach for satisfying the growing number of regulatory and legal obligations imposed on organizations regardless of the industry. ', 1 => false, 2 => 'With the mobile device becoming the dominant means of communications, organizations will need to improve the way they manage these devices. About one-quarter of organizations will seek to prevent employees from storing sensitive data on the mobile device, but most organizations will rely on mobile device management platforms over the next two years to help manage and secure that data. As part of this process, these platforms will likely be called upon to address compliance requirements for mobile devices much as has been done for desktop and laptops.', 3 => false, 4 => '=== Regulations and Laws ===', 5 => 'Financial Services as well as other heavily regulated industries must satisfy certain obligations with regard to text message monitoring, retention, and the protection of content.', 6 => false, 7 => '==== Financial Services ====', 8 => 'Banks, insurance companies, stock exchanges and brokerage firms must adhere to particular regulations regarding mobile-based communication. Sensitive material is constantly being channeled through mobile devices, and therefore must be regulated for security and legal purposes.', 9 => false, 10 => '===== The Financial Industry Regulatory Authority ([[FINRA]]) ===== ', 11 => 'FINRA Rules 3010, 3113: Requires the supervision and retention of records', 12 => 'FINRA Regulatory Notice 11-39: Provides guidance for the use of personally owned devices that contain or access corporate information', 13 => 'FINRA Regulatory Notice 10-06: Provides guidance for use of Web 2.0', 14 => 'FINRA Regulatory Notice 10-59: Requires the encryption of content on portable media devices', 15 => 'FINRA Regulatory Notice 07-59: Provides guidance for the review and supervision of electronic communications', 16 => 'For purposes of the FINRA guidance, "electronic communications," "email" and "electronic correspondence" "may be used interchangeably and can include such forms of electronic communications as instant messaging and text messaging."', 17 => false, 18 => '===== United States Securities and Exchange Commission ([[SEC]]) =====', 19 => 'SEC Rule 17a-3: Requires the production of such records', 20 => 'SEC Rule 17a-4: Requires the retention of these records', 21 => 'To Comply: - Retain all copies of all communication (emails, memos, texts, instant message etc.) for a minimum of 3 years. For the first two years the location of these records must be easily accessible', 22 => '- The records may be produced or reproduced via microfilm, microfiche, or any digital medium.', 23 => 'Any individual or company that trades securities is bound by these regulations, and violators have previously been fined for millions of dollars.', 24 => false, 25 => '===== Financial Security Authority ([[FSA]]) =====', 26 => ' Regulators for financial services in the United Kingdom', 27 => 'Published rules (PS08/1) in March 2008 concerning recording voice conversations and electronic communications. Requires the recording of "relevant communications" and retain it for six months. They plan to extend the current recording obligations to require the recording and storage of all "relevant communication" made with, sent from or received on mobile phones, but only those mobile devices that are issued by the firms for business purposes.', 28 => false, 29 => '===== Markets in Financial Instruments Directive ([[MiFID]]) =====', 30 => 'European Union Law ', 31 => 'The objectives of the Directive are to increase competition and consumer protection in investment services. Their measures will significantly change how European financial services markets operate. They require that all electronic communications in regards to securities orders must be recorded and safely retained for three years before deletion. They must be easily accesable and in proper format so that the MiFID can efficiently run inspections. Under MiFID "electronic communications" includes: faxes, emails, text messages, Bloomberg mail, video conferencing, B2B communication devices, instant messaging, chat room correspondence, and any future method of electronic correspondence.', 32 => false, 33 => '===== Gramm-Leach-Bliley Act ([[GLBA]]) ===== ', 34 => 'Financial Services Modernization Act of 1999', 35 => 'Protects the rights of individuals in regards to their personal financial information, Violations of the Act can result in significant fines up to $100,00 plus possible jail time.', 36 => 'Key-points of the GLBA: - Secure the confidentiality of all customer records and information, - Provide access to all customer records to prevent harm or inconvenience to any customer, - Storage of this information must be extremely secure by strong access controls and secure passwords, - Communication through emails must be kept secure and encrypted, - Sensitive customer information must be protected in case of physical disaster or technological failure.', 37 => 'Regulates organizations in the following services: financial services, insurance, tax preparation, banking, consumer credit reporting, brokering', 38 => false, 39 => '==== Healthcare ====', 40 => 'Health care professionals now utilize mobile devices to communicate and react quickly in emergency situations. The correspondence of a client's personal information must be protected, and conversations must be stored and monitored in case of future inquiries. All organization within the healthcare industry, as well as insurance companies, are bound by the legislation of the [[Health Insurance Portability and Accountability Act|Health Insurance Portability and Accountability Act (HIPAA)]]. ', 41 => 'They establish the physical and technical guidelines for safeguarding the privacy and security of [[Protected health information|Protected Health Information (PHI)]] which includes rules for the electronic transmission of patient information. Retaining correspondence thats contains PHI is monitored under HIPAA and failure to achieve mobile compliance can result in funds up to $250,000 followed by possible additional sanctions. ', 42 => false, 43 => '==== Government ====', 44 => 'All branches of the government must communicate with one another, often dealing with sensitive information, which means it must be secured and safely stored. Regulation in individual states have their own procedures for managing civil litigation, many of which have been updated to reflect the growing quantity of electronic information that organizations manage.', 45 => false, 46 => '==== Legal ====', 47 => '[[Federal Rules of Civil Procedure|The Federal Rules of Civil Procedure (FRCP)]] set forth the rules of discovery and disclosure for litigation that any company dealing with frequent cases must abide by. The non-compliance of these rules can lead to the dismissal or loss of a case as well as severe fines and disbarment of any employee involved. Amended on December 1, 2006 to include discovery pertaining to electronic records search and retention in regards to evidence discover, or e-discovery. The change was to establish the fact that electronic information is discoverable evidence. To stay competitive law staff utilize mobile devices and stay up-to-date technology wise, so therefore must have measures in place to be secure.', 48 => false, 49 => '==== Energy ====', 50 => 'With recent scrutiny that has risen after several oil spills, companies within the Energy sector need to have all aspects of their communication monitored and recorded in some way. Problems that may arise through miscommunication can result in unanticipated challenges that are extremely costly. Managing infrastructure in this industry, between management, employees and subcontractors who participate in rapid communication, improves workforce productivity and ensures regulatory and internal compliance. ', 51 => false, 52 => '==== Enterprise ====', 53 => 'With the advancement in technology, every company wants to be ahead of the competition. Through mobile device communication, companies can have quick exchanges with their costumers. This new technology can lead to liability issues if a problem were to arise. These companies require a system to archive and monitor all electronic communication made within their system. Regardless of the industry your company is in, without proper procedure in place to securely protect your clients private information, you could be open to liability. Allowing employees to communicate with clients through mobile communication will increase productivity and offer your clients a higher level of customer service. Companies would need an end-to-end mobile communication recording and reporting system in place, that is flexible enough to comply with present and future requirements.', 54 => false, 55 => '=== Implement Compliance Technology ===', 56 => 'Mobile devices allow users to remain productive wherever they are, as well as providing a competitive advantage given that many organizations are not yet taking full advantage of mobile computing.' ]