Protect your patients. Protect your practice. Protect your reputation.
Prepared by HaloCrypt LLC – Federal Contractor | CAGE 15YW8 | UEI DSN9V4E23N65 | www.thehalocrypt.com
Why it matters: If a laptop or phone with patient info is stolen, encryption keeps the data unreadable.
Action: Turn on full-disk encryption on every computer and mobile device. Use encrypted email or secure portals for sending patient files.
Why it matters: Shared logins make it impossible to track who did what.
Action: Give every employee a unique username and password. Immediately deactivate accounts when staff leave.
Why it matters: Passwords get stolen. MFA stops most hacks dead.
Action: Turn on MFA for all remote logins, EHR access, email, and cloud storage.
Why it matters: Out-of-date systems are hacker favorites.
Action: Schedule automatic updates weekly for Windows, browsers, EHR, routers, and antivirus software.
Why it matters: Ransomware can lock your files. A clean backup saves you.
Action: Use encrypted cloud backups or offline drives. Test restore once a month.
Why it matters: Human error causes most data breaches.
Action: Run short cybersecurity refreshers every 6 months. Teach staff how to spot phishing emails and report incidents fast.
Why it matters: HIPAA demands BAAs with any vendor handling patient info.
Action: Confirm every IT company, billing service, and cloud provider has a signed BAA on file.
Why it matters: Early detection stops major breaches.
Action: Review login and access logs monthly. Flag unusual after-hours or out-of-state logins.
Why it matters: Panic during a breach costs time and money.
Action: Write down exactly who to call, how to isolate systems, and how to notify patients if needed. Rehearse once a year.
Why it matters: Anyone on your guest Wi-Fi or walking into your server room could compromise data.
Action: Use separate Wi-Fi networks for guests and staff. Keep servers, routers, and backup drives in locked rooms.
| Item | Status | Notes |
|---|---|---|
| All devices encrypted | ☐ Yes | |
| MFA enabled on all systems | ☐ Yes | |
| Backups tested monthly | ☐ Yes | |
| Annual risk assessment completed | ☐ Yes | |
| BAAs signed with all vendors | ☐ Yes |
Cybersecurity isn't just IT — it's patient safety.
Small steps today prevent six-figure fines tomorrow.
Need help tightening your defenses?
Schedule a complimentary 15-minute HIPAA Security Check with HaloCrypt
Verified Federal Contractor – HaloCrypt LLC | CAGE 15YW8 | UEI DSN9V4E23N65