What considerations apply to OIMS mobile access?

• A. Secure channels (VPN/SSL), encrypted data, offline data handling minimal, remote wipe, device management
• B. Unencrypted channels
• C. No mobile access allowed
• D. Access only via desktop

Answer: (A)

Protecting data when people access OIMS from mobile devices requires a layered approach that secures the connection, protects the data, and controls the device itself. Use secure channels such as VPN or SSL to keep data encrypted while it travels between the device and the system. Encrypt data both in transit and at rest on the device so that even if the device is lost or stolen, the information remains unreadable. Keep offline data storage to a minimum so there isn’t a large stash of sensitive information sitting on the device when it’s not connected to the network. Enable remote wipe so you can erase data on a lost or compromised device. And implement device management to enforce security policies like strong authentication, device encryption, OS/app updates, and restrictions on data replication or sharing.

This combination is essential because it addresses multiple risk points: eavesdropping on the network, unauthorized access if the device is misplaced, and the potential for data leakage through stored data or unmanaged devices. Unencrypted channels or no mobile access would increase risk and reduce practicality, while relying only on desktop access ignores the real-world need for mobile productivity.