{"id":3685,"date":"2024-07-09T10:57:31","date_gmt":"2024-07-09T10:57:31","guid":{"rendered":"https:\/\/floridapimag.com\/?p=3685"},"modified":"2025-05-02T06:55:09","modified_gmt":"2025-05-02T06:55:09","slug":"safeguarding-client-data8-easy-cybersecurity-strategies-for-the-personal-injury-industry","status":"publish","type":"post","link":"https:\/\/server.stagingweb3.net\/amb-group\/safeguarding-client-data8-easy-cybersecurity-strategies-for-the-personal-injury-industry\/","title":{"rendered":"Safeguarding Client Data:8 Easy Cybersecurity Strategies For The Personal Injury Industry"},"content":{"rendered":"\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

<\/p>

Sharing data has become easier, but securely sharing that data remains elusive for many providers and attorneys. Email is ubiquitous \u2013 everyone has it, and patients and clients want to use it. You may think that HIPAA says you cannot, but you can \u2013 if you secure it.<\/div>
\u00a0<\/div>
The main goal here is to protect your client or patient data and send data securely. However you also want to protect your organization from other risks \u2013 phishing, business email compromise, reputation loss, and more.<\/div>
Here\u2019s an easy 8-step guide on how to ensure you\u2019re sharing your client\u2019s data safely:<\/div>
\u00a0<\/div>
1. Use Email Encryption when sending email. Software vendors like Sophos allow you to send encrypted emails simply by adding \u201cSECURE:\u201d at the front of the subject line. This also protects against business email compromise (BEC) which is crucial for lawyers handling sensitive information. Sending encrypted emails is the only way to meet HIPAA for sending email \u2013 you can\u2019t send data securely without it.<\/div>
\u00a0<\/div>
2. Use MFA for all of your email accounts. Google and Office365 have it. In fact, if you don\u2019t have it, you may have voided your cyber liability policy by not enabling it for all users. Multifactor Authentication means that if someone gets your credentials they still need the code from your phone to log in. In fact, use MFA on all of your accounts, not just email.<\/div>
\u00a0<\/div>
3. Use a filtering service before your email hits your provider. This will stop junk, spam, and malware from reaching your mailbox. If its not in your inbox, you can\u2019t be phished or scammed.<\/div>
\u00a0<\/div>
4. Enable \u201cexternal sender\u201d policies so you know when emails are coming from outside your domain. You will see a message cautioning the email was sent from outside your organization.<\/div>
\u00a0<\/div>
5. Enable VIP protection policies so that you know if someone is pretending to be a user from a different email address.<\/div>
\u00a0<\/div>
6. Verify if any \u201ctypo\u201d domains exist, for example an \u201ci\u201d when capitalized will look like a lowercase L and can be used to target your clients and patients. Go buy those domains so no one else does and then uses them against you or your clients.<\/div>
Email is ubiquitous \u2013 everyone has it, and patients and clients want to use it. You may think that HIPAA says you cannot, but you can \u2013 if you secure it.<\/div>
\u00a0<\/div>
7. Audit your IT services. If you use internal staff or an outside company make sure that you audit the work. Any decent IT person should not be fearful of their work being wrong or improved by audits.<\/div>
\u00a0<\/div>
8. Do regular security and compliance training. This teaches your staff how to recognize scams, phishing attempts, and other threats. Training should include compliance requirements to ensure adherence to legal and regulatory requirements.\u00a0<\/div>
\u00a0<\/div>
Andrew Renck is the owner of RootPoint, an IT services and Cybersecurity Provider located in Miami, FL. Andrew Renck is a 2003 graduate of the University of Miami with multiple degrees including Finance and Economics. While attending the University he created his computer consulting firm RootPoint. He has been providing secure systems integration long before \u201cCybersecurity\u201d became a recognized term. Renck is an ethical hacker and has provided services for both offensive and defensive cybersecurity projects.<\/strong><\/div>

<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t
\n\t\t\t\t\t

Email is ubiquitous \u2013 everyone has it, and patients and clients want to use it. You may think that HIPAA says you cannot, but you can \u2013 if you secure it.<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

Andrew Renck\n<\/h3>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

ROOT POINT<\/h4>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t