Mobile Device Management
in Westmoreland County, PA

Mobile device management matters more in Westmoreland County than in a compact single-city market precisely because the county is large and strung out along its highway corridors, and so are the workforces moving across it. Home-health clinicians drive between Greensburg, Latrobe, Mt. Pleasant, and the rural boroughs carrying protected health information on tablets. Field technicians and contractors work the Route 30, Route 22, Route 119, and Turnpike corridors with company data, customer records, and access credentials on their phones. Distribution and logistics operations around New Stanton run drivers and warehouse handhelds. Greensburg and Murrysville professional staff increasingly do real work from personal devices. Every one of those phones and tablets is a small, mobile, easily-lost piece of the company's network, and managing them as a fleet rather than as a pile of individually-configured handsets is the difference between a lost device being a shrug and a lost device being a breach.

We build mobile management identity-provider-first, because the device is only half the problem. Using Microsoft Intune, Jamf, or Mosyle tied to the company's Microsoft 365 or Google Workspace identity, we enforce the controls that actually contain a lost or stolen device: required encryption, an enforced passcode or biometric lock, the ability to remotely lock and wipe, conditional access that blocks company data from unmanaged or non-compliant devices, and app-level policies that keep corporate email and files inside managed apps. For an Independence Health-orbit home-health agency whose clinicians carry PHI across the county, that isn't a nice-to-have, it's the control that keeps a tablet left in a truck cab from becoming a HIPAA breach notification.

The bring-your-own-device question comes up constantly, especially in the Greensburg and Murrysville professional offices where staff want to use their own iPhones, and the honest answer is that BYOD done right protects both sides. Employees are rightly wary that management means the company can read their texts, see their photos, or wipe their personal phone. Modern MDM with work-profile separation (a managed container on Android, or user-enrollment and managed-app policies on iOS) draws a clean line: the company manages and can wipe only the work container (email, files, corporate apps) and has no visibility into and no control over the personal side. We configure it that way and we explain it that way to staff, because adoption depends on people trusting the boundary, and the boundary is real.

Across a county this size, the fleet also has to be manageable as one console regardless of the device mix. A typical Westmoreland client ends up with a blend: company-owned clinical tablets, company phones for field crews and logistics drivers, warehouse handhelds, and personal phones for office staff, spanning iOS and Android. We manage all of it from a single management plane with consistent policy, automated enrollment for new devices, and clean offboarding when someone leaves (one action revokes the work container and company access without anyone driving out to collect a handset). Whether a device is in a Greensburg office, a Latrobe shop, a New Stanton warehouse, or a home-health route through Mt. Pleasant, it's enrolled, compliant, and one click from being locked down if it goes missing.