How to Communicate to Staff During an Acquisition

INTRODUCTION

Mergers and acquisitions (M&A) among health systems and IDNs seem to be a regular occurrence. In 2017, we saw CVS-Aetna, Advocate-Aurora and UnitedHealth Group-Davita highlight a long list of M&As.

While your CEO may initially want to focus on what to say to the public, his/her first priority should be to internal audiences. Reasons include reducing anxiety about potential layoffs, removing uncertainty about the transition and improving morale. A Northwestern University study said “high-quality communication has a positive relationship with employee outcomes, such as satisfaction, commitment and decision to stay in the organization.”

Here’s how the communications department should work with the CEO of the health system being acquired. Continue reading “How to Communicate to Staff During an Acquisition”

Vendor Risk Management Strategy for Independent Practices

INTRODUCTION

contractCrises can happen at any moment–take Chipotle for example. According to an analysis by a risk management company, if the restaurant chain had had a vendor risk management solution, the food may have never been contaminated.

It’s also important for independent medical practices to have a vendor risk management strategy in place. If a vendor were to make a mistake, it’s your practice that unfortunately takes much of the blame and your patients who suffer the consequences. Here are tips on how to create such a strategy. Continue reading “Vendor Risk Management Strategy for Independent Practices”

How to Prevent Employee-Caused Data Breaches at Your Dental Practice

INTRODUCTION

dental officeSecurity breaches in the healthcare industry are on pace for more than one per day, according to a recent report. What’s telling is that 9.2 percent of the breaches occurred through accidental email/internet exposure and 8.7 percent due to employee errors, an IT security company discovered.

It’s one thing to be targeted by hackers, but dental practices wanting to prevent healthcare data breaches need to eliminate ones caused by staff.

Here’s how you can protect patient health information:

EDUCATE AND TRAIN DENTAL STAFF

Depending on the size of your practice, you may have just one person who handles all of your marketing, social media and PR. Let’s call this person your marketing director (and if you don’t have one, it may either be the owner or the receptionist).

You and your marketing director must focus internal communications efforts on situational training and education, respectively.

For your marketing director, regular communications–be it newsletters, Intranet blog posts, presentations, quizzes and/or handouts–are important to engage staff and build a mindset in which security is at the forefront. Your objective is to reduce or eliminate unintentional employee-caused data breaches.

For you (or your third-party IT consultant), cybersecurity company Redspin says to test staff with phishing emails and phone calls. Supplement the training with posters, wikis and other items the staff can reference quickly. For example, small stickers on laptops reminding staff only to use trusted wi-fi hotspots can go a long way.

With education and training, your dental practice hopefully can avoid breaches such as the email scam that affected the nursing home chain American Senior Communities in Indiana.

USE A PRIVILEGED ACCESS MANAGEMENT SYSTEM

Work with an IT company to install Privileged Access Management (PAM) software. It will determine who may access various systems and create a digital audit trail. PAMs often require multiple types of authentication when logging in. Thus, you need to make sure staff members achieve informed consent about these safeguard processes that can be time-consuming or annoying, according to the Commonwealth Fund.

PAMs also can help stop malicious employees or ex-employees who intentionally steal information or cause other harm to your systems. Give your dental patients peace of mind by telling them (e.g. through your website) that you’re doing everything in your power to protect their sensitive information.