Pillar 01 — Human Firewall
Make your staff harder to fool
Most healthcare incidents don't start with a sophisticated hack. They start with a person on your team doing something reasonable in the moment — clicking a link, sharing a password, paying a 'updated' invoice, sending a result to the wrong number. Human Firewall changes that.
What your team actually learns
Phishing your staff can recognise
Real South African healthcare phishing examples — not generic corporate templates. Your team learns to spot the fake medical aid email, the spoofed pathology lab, the 'updated banking details' message.
WhatsApp & email handling rules
Clear, simple rules for when patient information may and may not go through WhatsApp or email — rules staff can actually remember and follow without a manual.
Payment verification call-back SOP
The one rule that stops supplier banking-detail fraud: never pay a banking change without a call-back to a known number. We build it into your practice's routine.
Password & access hygiene
Practical alternatives to the shared reception password — ones that don't require your staff to become IT experts.
What you get
- Baseline awareness session for all staff (reception, admin, practitioners)
- Role-specific guidance for practice managers and Information Officers
- Phishing simulation with real-world SA healthcare scenarios
- Simple, printable reference cards for the front desk
- Payment verification call-back SOP template
- Follow-up check-in to reinforce habits (not a one-off video)
Why this isn't a generic video module
Generic cybersecurity training talks about 'the evolving threat landscape'. Your receptionist doesn't need that. They need to know what to do when a patient's result needs to go somewhere fast, when an email asks for banking details, and when a locum needs a login today. We build training around those moments.
Your staff are your strongest control — or your biggest gap.
Book your free 20-minute HDS Diagnostic. No technical knowledge needed. No obligation.