DTO Enhancing your Clinics Security Self-Assessment

1
Have you taken an Introductory Privacy & Security Course? This includes Health Authority courses or Division of Family Practice.
YESNO
2
Take DTO’s eLearning Security in Low Doses

Hosted on the UBC Continuing Professional Development (CPD) website, this course is free and available for all clinic staff. Physicians are eligible for 1 CME credit upon completion. The course should take about 1 hour.

This course is recommended as a first step for all clinic staff. Consider including it in your onboarding process when new staff join your team!!

Still have questions? Send us an email at DTOinfo@doctorsofbc.ca
3
Does your clinic have a designated person responsible for overseeing your clinic's IT security?This person is sometimes referred to as a Security Lead.
YESNO
4
Choosing a Security Lead

Having dedicated IT expertise to help manage accounts, keep hardware and software up to date, and monitor network activity is key to maintaining your clinic’s security posture. The Security Lead is a person with IT expertise that supports the clinic’s Privacy Officer and is responsible for implementing technological safeguards to protect patient information.

Refer to this template for help choosing an IT support provider that will meet your clinic’s needs.
5
Does your clinic have a process for managing user accounts and passwords?Understanding the benefit of good password practices and the use of multi-factor authentication (MFA) is key to protecting personal health information.
YESNO
6
Accounts and Passwords

Account credentials, also known as usernames and passwords, are the digital keys to your clinic’s information. Click here to find information about how to:

Ensure user accounts are reasonably secure.

Establish a system where the right people are accessing the right information in your clinic’s information systems.

Still have questions? Send us an email at DTOinfo@doctorsofbc.ca
7
Does your clinic have secure networks in place for working in-office and remotely?This would include basic configuration of your clinic and home network equipment.
YESNO
8
Setting up secure networks

Ensuring your network is configured and trusted, whether in the clinic, at home, or another remote location, is critical to protecting patient information. Click here to find information on how to:

Perform basic configuration of your clinic and home network equipment.

Understand the risks when working remotely and how to mitigate them.
9
Does your clinic know how to prevent a Security Breach?Losing access to your clinical systems can significantly delay or even halt your clinic’s ability to operate. Understanding and recognizing the most common cybersecurity threats is critical for mitigating the risk of a security breach.
YESNO
10
Preventing a Breach

Losing access to your clinical systems can significantly delay or even halt your clinic’s ability to operate. Click here to learn shared tips on how clinics can reduce the risk of personal health information falling into the wrong hands and preventing the computer systems in your clinic from becoming inaccessible.
11
Are your computers running a supported Windows or Mac operating system?Keeping your systems and software up to date is one of the simplest and most effective ways to protect patient information.
YESNO
12
Updating Systems and Software

Keeping your systems and software up to date is one of the simplest and most effective ways to protect patient information. Using the most current software reduces the likelihood that cybercriminals will exploit vulnerabilities on your computer system. Click here to learn more!

Still have questions? Send us an email at: DTOinfo@doctorsofbc.ca
13
Looking for more Resources?

Check out DTO's Physician Office IT Security Guide. This guide provides practical steps and best practices to enhance security at the clinic level and protect against security breaches and cyberattacks. It is meant to help physicians, clinic staff, and IT support to start on the path of creating a security culture within their practice and increase awareness of common safeguards for protecting patient information.

Have more questions? Send us an email at: DTOinfo@doctorsofbc.ca
Should be Empty: