A survey of the networking priorities of 130 hospitals found that about 85% support the use of personal devices like iPads, Blackberries and Android smartphones at work.
The survey, performed by Aruba Networks, focused mainly on network issues and showed varying levels of access to business apps through employees' devices.
Of the 85% who indicated they support physician and staff use of personal devices at work, 53% said that the workers are currently relegated to Internet access only, while 24% provide limited access to hospital applications.
Only 8% currently enable full access to the hospital network from user-owned devices, the survey showed.
Seventy-six percent of respondents said they provide Internet access to patients and visitors, with 58% doing so through open networks without password protection. Seventy-five percent also noted that their hospital applications are available remotely to clinics, physicians and others.
In November, research firm IDC Health Insights conducted its own survey of 50 healthcare CIOs -- 25 in the U.S. and 25 in Western Europe. The results were similar to those found by Aruba Networks.
In the IDC survey, 40% said staff could connect into the hospital's production network with their own devices, 24% allow physicians to use their own device but only to access the Internet, 12% said staff could use a personal device but not connect to any network and 4% allow no personal devices.
"Certain bring-your-own-device strategies present certain security risks: the introduction of mobile malware onto a hospital network, for example," said Lynne Dunbrack, IDC Health Insights program director.
The top concern among security risks is that a device might be lost or stolen, which forces CIOs to determine the level of their security policies. "Do you wipe the entire device, or do you partition it so that you only wipe the sensitive data on that device?" Dunbrack said.
Aruba's survey also indicated that electronic medical records (EMR) applications are far and away the most-often supported applications on mobile devices, with 60% of respondents indicating that's what they were allowing employees to connect to through their devices. EMRs were followed by PACS (picture archiving and communication systems), Secure Messaging, and Voice over IP (VoIP), each in the 30% range.
"BYOD has really become an increasing issue for us in the past year," Bryan Safrit, a senior network architect for Rex Healthcare in North Carolina, said in a statement. "Much more of the traffic we see is from iPhones, iPads and Android devices. Without the ability to differentiate users and enforce policies, our BYOD traffic could overwhelm our bandwidth."