How Brainkind identified a high-risk clinical app and strengthened its BYOD policy.
Clinical apps outside the review process.
Brainkind’s Director of Digital discovered that clinical applications were being used on work and personal phones and tablets without prior security assessment. That raised concerns about patient data and prompted a review of the mobile app estate covering 63 users in the original case study.
“What really triggered a need to understand our apps was the discovery of a significant number of clinical apps being used on both mobiles and tablets on work and personal devices within the organisation. Mobile apps were being used without any kind of qualification, verification, or testing, especially from a security perspective.”
Director of Digital, Brainkind
The concern extended beyond obvious malware. A legitimate app could still contain vulnerabilities or privacy risks, making a structured review important wherever an application had been downloaded.
From discovery to ongoing assessment.
Security partner Vambrace recommended MobSTR, and Brainkind became an early adopter. The platform uses AI and reverse engineering to assess vulnerabilities, privacy issues, malware and other application risks, supported by ongoing monitoring and alerts.
“Deployment was seamless and the product is very easy to use. Training on the platform was second to none, with constant feedback from MobSTR and the technical staff about ongoing usage and how to get the best out of the service.”
Director of Digital, Brainkind
A finding the team could act on.
The scans identified one clinical app as high risk because a vulnerability could have been exploited to exfiltrate health data. Brainkind blocked it and used the findings to strengthen its bring-your-own-device (BYOD) policy.
“Immediate steps were taken to lock down and block the app, and we subsequently ensured our BYOD policy was brought up to date. We enforced the removal of untested or unapproved apps from work mobile devices and ensured they are not accessible for use in our organisation on personal devices.”
Director of Digital, Brainkind
The result was a clearer basis for approving applications, supporting staff productivity and managing the risks around patient care. The relationship with Vambrace continued to grow.
Reflecting on the work at the time, the Director of Digital said: “Having worked on our cybersecurity posture for the past three years, MobSTR gives us the peace of mind that mobile apps cannot compromise our internal networks.”
About this customer story & photography
The original case study described Brainkind as the UK’s largest not-for-profit brain injury charity.
Customer figures, actions and testimonials reflect the original interview. The 63-user figure describes the scope reported in that story.
Illustrative rehabilitation photography; not Brainkind staff or service users.