← JournalGuidelines
Guidance explainer

Dental cybersecurity: prioritize recovery as well as prevention

Use Canadian baseline guidance to ask better questions about access, backups and incident response.

The reference

The Canadian Centre for Cyber Security publishes baseline controls for small and medium organizations. These provide a starting point for planning and testing security controls.

Source: Canadian Centre for Cyber Security · Baseline controls

Our operational interpretation

A practice should understand how work continues when an account is compromised or a service becomes unavailable. Identify the person authorized to disable access, the location of a usable backup and the route for contacting technical support. Include the systems used to send files to laboratories.

Ask for a demonstration

A backup policy is less informative than a recorded restoration exercise. During supplier evaluation, use generated information to test recovery and access removal. Record what was recovered, what was missing and the elapsed time. Choose improvements based on the effect on the practice’s actual work rather than on the number of security features named in a sales presentation.

A closer look

FocusWhat to look atWhy it matters
PreventionAccess controls and maintenance.Ask how controls are applied to actual accounts.
ResponseRoles and incident contacts.Test whether the right person can act promptly.
RecoveryRestoration of usable records.Keep evidence of a recovery exercise.

Frequently asked questions

Does a backup prove recoverability?

No. Recovery should be tested against the required records and operating needs.

Should a workflow demo use real patient data?

Use generated data for an initial demonstration; live data requires the agreed operating and privacy arrangements.

Sources & further reading

Reported facts are attributed above. Sections labelled as our interpretation offer NovaDonto’s editorial perspective. Our editorial approach.

Continue the conversation.

Explore the sample-case beta or choose the updates you want to follow.

Updates & beta information ↗