Blog
EMS Cybersecurity Insights & Resources
Evaluating a vCISO Engagement Without Getting Sold Hours
I have sat through enough vCISO pitches to recognize the pattern. Here is how to evaluate based on what they produce, not hours billed.
Account Takeover Through Password Reuse: The Attack Chain
How a LinkedIn breach becomes an ePCR breach through password reuse, and why MFA, credential monitoring, and an agency-issued password manager break the chain.
ImageTrend, ESO, and Zoll Online: A Security-Posture Evaluation Framework
A vendor-neutral rubric for evaluating ePCR platform security at renewal time, with specific questions to send ImageTrend, ESO, and Zoll Online.
Working With an IT MSP That Doesn't Understand EMS
The operational realities your generalist MSP is missing, the contract addendum that closes the gap, and the boundary between IT and operations.
42 CFR Part 2 in the Field: Substance-Use Disorder Confidentiality That HIPAA Doesn’t Cover
Most EMS agencies know HIPAA cold. They train on it at orientation, build their ePCR workflows around it, audit for it. And then 42 CFR Part 2 walks in thr
Building an Incident Response Plan That Survives Contact With a Real EMS Cyber Incident
Generic IT incident response plans fail in EMS. Build a plan that accounts for clinical continuity, dispatch, NEMSIS, and the 2 a.m. runbook.
Vendor Risk Management for Small EMS Agencies Without a CISO
How to manage vendor risk for a small EMS agency without a CISO. A lean 80-20 approach focusing on the vendors that handle PHI and keep the trucks running.
When the Ambulance Is the Endpoint: Zero Trust for the Rig
An ambulance is a mobile data center. Here is how to apply zero trust principles to secure the modem, tablet, monitor, and camera without breaking clinical workflow.
Scaling 100 Trucks: Automation Strategies for Fire and EMS IT
How to deploy and manage 100 connected EMS vehicles using cloud management consoles, variable-driven templates, and MDM without manual per-truck setup.
Ransomware Hit the Hospital: The EMS Dependency Map Nobody Draws
When ransomware hits a hospital, EMS operations take a direct hit too. Here is the dependency map most agencies have not drawn and what to do about it.