From Cyber Risk to Cyber Ready: Developing an Action Plan-From Cyber Risk to Cyber Ready: Developing an Action Plan

Video Transcription

Video Summary

Gary Salmon’s webinar, “From Cyber Risk to Cyber Ready,” urges dental practices to treat cybersecurity as an ongoing operational priority. He compares ignored warning signs before a cyberattack to symptoms he initially dismissed before his colon cancer diagnosis, emphasizing that small indicators can signal a serious underlying problem.<br /><br />Salmon describes ransomware groups as organized operations that target health care organizations, including dental practices. Attacks can begin through software vulnerabilities, phishing, reused passwords, convincing AI-generated calls, or third-party vendors. A breach may disrupt patient care and business operations, expose patient records, trigger legal and regulatory obligations, lead to lawsuits, and cause substantial financial and reputational harm. Cloud services and backups are not automatically safe.<br /><br />He recommends continuous threat exposure management (CTEM): regularly identifying systems and vulnerabilities, prioritizing risks, assigning responsibility for fixes, and verifying that remediation works. Practices should distinguish cybersecurity expertise from routine IT support and seek measurable visibility into their security posture.<br /><br />Suggested safeguards include multi-factor authentication, unique passwords stored in a password manager, business-domain email with advanced email protection, managed endpoint security and patching, tested backups, staff training, vendor-access controls, and penetration testing. The webinar closes with a staged 90-day plan: inventory systems and confirm safeguards in the first month; implement vulnerability management and monitoring in the second; then test defenses, train staff, and assign deadlines for remaining risks.

Keywords

cybersecurity

dental practices

ransomware

phishing

multi-factor authentication

vulnerability management

patient records

continuous threat exposure management

endpoint security

vendor access controls