Cybersecurity

Ransomware and the Small Medical Practice: What Happens, What HIPAA Requires, and What Preparation Looks Like
- Larry Brooks
- Healthcare, Cybersecurity
- 03 Nov, 2026
The call comes on a Monday morning. The front desk opens the office and the EHR will not load. The schedule for the day is inaccessible. Patient charts are unavailable. There is a message on the scre
read more
Is My IT Company Handling HIPAA? Five Questions That Reveal the Gap
- Larry Brooks
- Healthcare, Cybersecurity
- 03 Nov, 2026
The question comes up almost every time I talk with a small practice administrator: "Doesn't our IT company handle all of that?" It is a reasonable assumption. The practice pays a monthly fee to an
read more
What a HIPAA Security Risk Analysis Actually Requires (And Why Most Small Practices Have Never Done One)
- Larry Brooks
- Healthcare, Cybersecurity
- 03 Nov, 2026
When OCR investigates a small practice after a breach, one of the first things it asks for is documentation of the practice's Security Risk Analysis. Not a summary of security measures the practice b
read more