Shared workstations are a fact of life in nursing facilities. A computer at the nurses' station is used by a dozen people each shift, and medication carts roll from room to room with a laptop on top. These devices must be fast and convenient, because delays affect residents. They also hold or reach protected health information, which makes them a security concern.
The goal is not to slow staff down. It is to make the secure way the easy way. Here are practical measures for shared workstations and carts.
A screen left unlocked and visible to residents, visitors or other staff
Shared logins, which make it impossible to know who accessed what
Passwords written on notes near the device
Lost, stolen or tampered carts and laptops
Unpatched or unmanaged software
Visitors or residents plugging in USB devices or accessing the screen
Poor physical position of screens, where passersby can read them
Each user should sign in with their own credentials. Shared accounts remove accountability, which HIPAA's audit control and unique user identification requirements are designed to preserve. To make individual logins fast:
Use badge tap-in or proximity cards, or fingerprint readers, where your EHR and workstation setup supports them
Use fast user switching so one person's session can be locked without logging out of everything
Use single sign-on to reduce the number of logins per shift
Set a sensible password policy that favors length, supported by a password manager for less common systems
Set shared workstations to lock after a short period of inactivity. A few minutes is common, but your clinical leadership should help choose a number that avoids constant interruptions during documentation. Pair it with proximity-based locking where possible, which locks the screen when the badge moves away. Train staff to lock manually with a keyboard shortcut when they step away, and make that habit part of orientation.
Angle screens away from hallways and doorways, or add privacy filters
Lock medication carts when unattended, and secure the laptop and its power supply to the cart
Store carts in a locked area when not in use if practical
Use cable locks on desktops and tablets that are at risk of theft
Label devices with asset tags and keep an inventory, so a missing device is noticed quickly
Keep unused USB ports disabled or restricted on shared computers
Shared workstations should be managed devices. That means:
Full-disk encryption on every laptop and cart computer, so a lost device does not become a breach
Endpoint protection with central monitoring
Automatic patching scheduled during low-use times, such as overnight
Restrictions on installing software, so staff and visitors cannot add programs
Web filtering to prevent browsing known malicious sites
A standard configuration that can be rebuilt quickly if something goes wrong
Many "workarounds" start with practical problems. A cart whose battery dies mid-shift leads staff to borrow a coworker's laptop. A weak Wi-Fi area leads staff to carry paper notes to transcribe later. Fixing the underlying problem removes the reason for risky behavior, so include battery health and wireless coverage in your regular device checks.
Rules on locking and logging off
A ban on sharing credentials, with a clear process for getting access quickly when a user is locked out
A policy for reporting lost or stolen devices immediately
Guidance on printing, with printers placed in secure areas and unattended documents removed promptly
Rules about photographing screens or using personal phones near workstations
Review access logs periodically for unusual patterns, such as logins at odd hours or from unexpected devices. Spot-check workstations on each shift for unlocked screens or notes with passwords, and treat findings as coaching opportunities. Document your checks, since they show a reasonable, ongoing effort during a risk analysis or survey.
Directors of nursing and charge nurses know where the friction is. Ask them which security steps cause the most delay, then work with IT to find faster alternatives. Controls that staff routinely bypass offer little protection.
UnityCare IT helps care facilities configure shared workstations, carts and badge login so that security fits into the pace of the floor. If you would like us to review the devices you use on your units, we can walk the halls with your nursing leaders and make practical recommendations.
Call or text: 405-285-3845
New customers: start@unitycareit.com
Existing customers: support@unitycareit.com
Address: UnityCare Technologies, 2524 N Broadway Ste 554, PMB 947974, Edmond, Oklahoma 73034-4172