Cyberthreat Checklist: 10 Key Steps to Defend Your Practice
Daniel Ruscigno
Living in an Internet-connected society brings many conveniences and benefits. The power of the Internet to connect us with customers, store data and find information has opened the door for many small-business owners to grow and flourish. But along with the benefits of this connectivity comes a responsibility to ensure the security of our businesses and our customers' data.
One step you can take to keep your patient records secure is using a clinic management program that follows all of the guidelines outlined by HIPAA. This will take much of the burden of protecting personal health information (PHI) off you. But what about the rest of the information storage systems used for your business? Any weakness in your security can leave you vulnerable to a cybercrime.
Fortunately, there are steps you can take to prevent your chiropractic practice from being victimized. I've listed several of the most important steps below.
1. Password-Protect Your Devices
Portable devices enable professionals to take their data with them when out of the office, but they also pose a substantial security risk. In fact, a 2016 article by SC Magazine reported that more than one-quarter of data breaches that have occurred since 2006 were related to lost or stolen mobile devices.
Don't let a lost or stolen device damage your business's reputation. Just like any data storage system (including your laptop / computer), your tablet or smartphone should be secured with a strong password.
2. Use Unique Passwords
No one really likes dealing with passwords and multi-step authentication. This is especially true when you are using multiple devices or workstations and need a different password for each one. Despite the hassles, using unique passwords and updating them regularly is still a necessary measure for keeping your business data secure. If you resort to using a single password for all your devices, cybercriminals may exploit your password fatigue for their benefit.
3. Store Your Passwords Securely
Keeping track of unique passwords can be a challenge. Many people resort to writing them down in a Word or Excel document. Do not do this! If remembering passwords has become a challenge, look into using a password management program such as LastPass.
4. Watch Where You Put Things
One simple, but often overlooked step to keep your data safe is to limit who has physical access to your data. Don't place networked devices in locations that are accessible to people visiting your office. If your family members share your device, create a separate login for them so your files are not accessible to them.
5. Keep Your Wi-Fi Activity Private
If you use a Wi-Fi router in your office, secure your network by requiring a password to join. If you provide Wi-Fi access to your patients, you may want to chat with a technical expert to set up a guest network so you are the only one with access to the network you are using to work with PHI. If you access business or customer information from your home via Wi-Fi, employ these same protective measures there, too.
6. Install Antivirus Software ... and Make Sure You Use It
Malicious websites, shared files and emails can all harbor malware that can harm your computers or steal your data. To protect against these hidden dangers, install antivirus software on you devices and update it regularly. Set your antivirus software to scan each email and download, and to conduct regular scans of each computer to check for threats.
7. Store Your Files in the Cloud
A lost or stolen device can be a chiropractor's nightmare, as it could mean a loss of all of your patient files. By using a cloud-based practice management software program, your files will be stored securely on a central server. This means if your device is lost or stolen, your files are still safe. You can also look into services like Google Drive or Dropbox. Be sure to check the service provider's HIPAA policy.
8. Back Up Your Data
This is another item that's easily handled if you're using clinic management software, as the service provider will typically handle backups for you. If you are manually managing your files, you want to protect against damage or a lost / stolen device. You should be making a copy of all of your patient files and storing them in another secure location.
9. Educate Your Staff
Your cybersecurity efforts will only be effective if every person in your office follows every security measure. It isn't just new hires that may need to be briefed. You should also schedule regular meetings with staff to review your policies and ask about any suspicious activity they may have noticed.
In particular, remind your staff about the dangers of unauthorized software, password sharing, and leaving mobile devices unattended. Read through the HIPAA regulations and be sure you have no security holes in your day-to-day processes.
10. Ask an Expert for Advice
While some cybersecurity measures can be accomplished without assistance, you may find it useful to call in an expert. A professional in cybersecurity can perform an audit to identify weaknesses in your current practices. An expert can also help you secure your router and other equipment, and advise you on best practices for ongoing safety.
A little prevention can go a long way when it comes to securing your organization's data. It can also save you a lot of money, as you may be subject to financial penalty if a data breach occurs and you did not have acceptable security measures in place. By taking proactive steps to prevent a breach, you'll enhance your chiropractic practice's cybersecurity and gain peace of mind.
Some doctors thrive in a personality-based clinic and have a loyal following no matter what services or equipment they offer, but for most chiropractic offices who are trying to grow and expand, new equipment purchases help us stay relevant and continue to service our client base in the best, most up-to-date manner possible. So, regarding equipment purchasing: should you lease, get a bank loan, or pay cash?
Some pundits say that the upcoming presidential and congressional races, and many local races, might be the most consequential in our country’s history. We do not have the choice of sitting on the sidelines and hoping our patients will carry our water. Unlike other medical professions such as physical therapists, podiatrists, nurses, etc., the health care class (AMA) will not protect us. We must be in the game.
The most common condition affecting the shoulder is rotator-cuff disease. From acute tears to chronic tendinopathy, it’s common and needs a thorough workup. In fact, even asymptomatic shoulders can have full-thickness rotator-cuff rears in up to 40% of instances. Let’s look at additional conditions that can present to the office with weakness, loss of motion and pain in the shoulder beyond rotator-cuff tears.
