If Your Practice Gets Hit, You Won't Have Time to Think
A free, print-ready checklist covering exactly what to do in the first 15 minutes, the first hour, and the days that follow a cybersecurity incident, before you need it.
Five Phases, In the Order They Have to Happen
Detection and containment come first. Restoring anything before forensic clearance can reintroduce the problem, so the sequence matters as much as the steps inside it.
Contain the threat before it spreads
Identify every affected device or account, disconnect it from the network, and leave the system exactly as it is.
The order you call in can protect your coverage
Cyber insurance first, then your attorney, then IT or your managed security provider, then leadership. Most policies require notification before remediation starts.
Forensics leads, you preserve and keep moving
The forensic team assigned by your insurer scopes the breach. Your job is preserving logs, emails, and devices, and keeping the practice running on paper where you can.
The clock starts at discovery, not at the breach
Your attorney determines reportability. Unauthorized access to unsecured PHI is presumed reportable to HHS unless an exception applies, and affected patients need written notice.
Recovery is a sequence, not a switch
Clean backup, new credentials everywhere, careful resumption of billing, and a post-incident review within 30 days to close the gap that let this happen.
Built to Sit by the Workstation, Not in a Drawer
The exact first-15-minute isolation steps, and the two things you should never do.
Who to call first, it is not your IT contractor, and why the order matters for your coverage.
What has to happen before the HIPAA 60-day notification clock starts working against you.
A fill-in-the-blank emergency contact sheet to keep by every workstation.
The Cost of Not Having a Plan
The average ransom demand in a healthcare cyberattack is $1.3 million. The average practice that gets hit is down for 18 days, no claims going out, no revenue coming in. Most practices have some kind of IT support. Very few have an actual plan for the first hour.
This checklist is the plan. Five phases, in order, from the moment you suspect something is wrong through HIPAA notification and getting your billing back online.
Get the Checklist →Get Your Copy →
We'll send the checklist straight to your inbox.
A Free Metrics Review With Our Co-Founder
Send us your numbers and Dr. Heather Signorelli reads your denial rate, your aging and your payer mix, then tells you what they mean. Free, and nothing to buy at the end.
Get a Free Metrics Review →