Pillar 03 — Incident Readiness
Know exactly what happens in the first 30 minutes
When a breach or fraud attempt happens, the worst time to figure out your response is during it. We build the playbook, assign the roles, and walk your team through it — calmly, before you need it.
The first 30 minutes
Would your practice know what to do in the first 30 minutes of a data breach? Most don't — and that's when the damage is decided.
Stop and contain
Who disconnects, who preserves evidence, who doesn't panic-delete. The first decisions that determine whether you recover or make it worse.
Assess and escalate
Who decides it's a notifiable incident, who contacts the Information Officer, and who starts the clock on regulator notification.
Communicate
Who tells affected patients, what they say, and what they absolutely don't say. Who handles the billing bureau, the bank, the cloud provider.
What you get
- Incident response playbook tailored to your practice
- Role assignment — who does what, named in advance
- Escalation paths and contact tree
- Regulator notification guidance and timelines
- Patient communication templates (calm, honest, compliant)
- Tabletop walkthrough with your team — before you need it
Why rehearsal matters: A playbook nobody has walked through is just a document. We run a tabletop exercise with your team so that when something happens, the response is muscle memory — not a frantic search through a folder.
A breach is stressful. Your response to it shouldn't be improvised.
Book your free 20-minute HDS Diagnostic. No technical knowledge needed. No obligation.