NIST offers guidelines for vetting mobile apps.

• Position: MOBILE DEVICES

The use of mobile devices at work may improve productivity, but it can also challenge the organization's data security and privacy. Third-party mobile applications need to be thoroughly vetted before they are allowed in the workplace. This is true for all sectors, including government. That's why the National Institute of Standards and Technology (NIST) drafted guidelines for vetting third-party apps.

"Agencies need to know what a mobile app really does and to be aware of its potential privacy and security impact so they can mitigate any potential risks," Tony Karygiannis, a computer scientist in the NIST's Computer Security Division, told InformationWeek. "Many apps may access more data than expected and mobile devices have many physical data sensors continuously gathering and sharing information."

For example, individuals could be tracked without their knowledge through a calendar app, a social media app, a Wi-Fi sensor, or other utilities connected to a global positioning system. "Apps with malware can even make a phone call recording and...