No, ITS cannot spy on your device through MobileIron, nor is ITS interested in actively monitoring your device. In addition, ITS enforces very minimal requirements and restrictions on your device – a password, which enables encryption. Here are things MobileIron does not do:

• View or read your SMS and MMS messages
• View your pictures
• View your website browsing history
• Turn on your camera to take photo or video
• Listen in on your conversations
• Open or delete your files and applications
• View contents within your applications
• Drain your battery

Also, ITS does not read individual emails in your Weill Cornell account, nor can we access any personal email from external sites like Gmail or Yahoo! Mail. ITS uses a data loss prevention software in accordance with College policy (see 11.02 - Privacy of the Network and 11.03 - Data Loss Prevention) to make sure confidential data is not sent to external accounts (those that do not end in @med.cornell.edu) without encryption.

It is important to note that although ITS does not actively monitor emails, Weill Cornell reserves the right to access, review, and release electronic information under circumstances necessitated by legal or regulatory requirements.

Yes. Any mobile device (smartphone or tablet) configured with a WCM email account (or wishing to access the WCMC Wi-Fi network) must have MobileIron installed. Without MobileIron, WCM cannot ensure the security of all devices with WCM data. In the event the device is lost or stolen, there are no assurances that WCM data has not been breached or inappropriately disclosed. Weill Cornell's faculty, students, and staff create and share a wealth of information on their mobile devices every day, much of which may be confidential. Should your device become lost or stolen, ITS can locate or wipe your device remotely at your request to make sure this data never gets into the wrong hands. Even if you do not regularly work with confidential data, it can protect the other content on your phone and is necessary for inventory tracking by your department. Not only does it protect you, it protects everyone who does business with Weill Cornell.

But I don't access clinical or confidential data. Do I still need MobileIron?

Yes. WCM's definition of confidential data extends beyond protected health information (see ITS 11.03 - Data Classification). If you use your mobile device to access the WCMC wireless network, you are using Weill Cornell resources and will need to have MobileIron installed.

MobileIron is a mobile device management (MDM) system that provides ITS with a means of governing mobile access to WCM resources, including email, calendar, contacts, and other central applications. Through the use of MobileIron, which is a free application that is installed on a governed mobile device, ITS has the ability to configure devices with the appropriate WCM settings to allow access to Wi-Fi networks, a WCM email account, and WCM applications. As a benefit to both WCM and the end user, MobileIron helps manage compliance with security policies and other regulations by enforcing device encryption and the use of a passcode to reduce the risk of accidental or improper disclosure of data In the event the device is lost or stolen.

There are dozens of courses in the WTMS course catalog. You can view available courses by logging into the Weill Business Gateway and clicking the "My Workspace" tab. Once there, you will find a link to "Learning" and be able to search the entire course catalog to view all course offerings.

Training Administrators and instructors can upload and administer course content in LMS. If you require this access, please contact its-training@med.cornell.edu for more information.

Training in the Health Insurance Portability and Accountability Act (HIPAA) is required for all WCMC employees, regardless of whether your work is patient-related. When you begin your employment at WCMC, Human Resources will indicate how you can take HIPAA training in WTMS. This training must be completed within the first 45 days of your employment. Please note that all Weill Cornell employees, regardless of how long they have been working for the institution, may be asked to retake their HIPAA certification when updates are made to the policy. Your department will be notified if you are required to retake the certification.

We put together a couple of step-by-step guides to help you register your phone:

• How to register a new iPhone or iPad in MobileIron
• How to register a new Android device in MobileIron