Managing security-compromised communication devices in a talk group

A talkgroup server, comprising:

• a communications interface;
• and
• an electronic processor communicatively coupled to the communications interface, the electronic processor configured to:
• receive, via the communications interface, security information associated with a plurality of communication devices that are each operated by a respective one of a plurality of members of a talk group;
• determine that the security information indicates that the security of at least one communication device from the plurality of communication devices is compromised;
• receive, via the communications interface, a request to initiate a group call between the members of the talk group;
• determine whether the request is associated with an incident assigned to the members of the talk group;
• in response to determining that the request is associated with the incident assigned to the members of the talk group, obtain one or more incident-response communication requirements associated with responding to the incident, wherein the incident-response communication requirements include one or more of an incident-response criticality requirement, an incident-response confidentiality requirement, or an incident-response member availability requirement;
• retrieve a security policy indicating that a particular one of the incident-response criticality requirement, the incident-response confidentiality requirement, or the incident-response member availability requirement should be prioritized over other incident-response communication requirements in determining whether to restrict or allow participation of security-compromised communication devices in a group call;
• and
• restrict or allow the participation of the at least one communication device in the group call established between the members of the talk group based at least in part on the incident-response communication requirements associated with responding to the incident and further based at least in part on prioritizing the particular one of the incident-response criticality requirement, the incident-response confidentiality requirement, or the incident-response member availability requirement over the other incident-response communication requirements.

A method of managing security-compromised communication devices in a talk group, the method comprising:

• receiving, at a talkgroup server, security information associated with a plurality of communication devices that are each operated by a respective one of a plurality of members of a talk group, wherein the security information includes a security compromise score determined based on security vulnerabilities detected at the communication device;
• determining, at the talkgroup server, that the security information indicates that the security of at least one communication device from the plurality of communication devices is compromised by determining that the security compromise score associated with the at least one communication device exceeds a security compromise threshold;
• receiving, at the talkgroup server, a request to establish a group call between the members of the talk group;
• determining, at the talkgroup server, whether the request is associated with any incident assigned to the members of the talk group;
• in response to determining that the request is associated with an incident assigned to the members of the talk group, obtaining, at the talkgroup server, one or more incident-response communication requirements associated with responding to the incident;
• and
• restricting or allowing the participation of the at least one communication device in the group call established between the members of the talk group based at least in part on the incident-response communication requirements associated with responding to the incident.