AI and Cybersecurity: Keeping EHR Client Data Safe

Banks, hospitals, school districts, and government agencies are all having the same conversation right now. AI has people worried about sensitive data, and that worry has probably already reached your inbox.

Bank of America recently wrote to its customers about it, pledging to keep investing in security while asking people to be careful with their login details. When a bank that size is talking about this openly, it’s reasonable to wonder about the client records in your own system. Your agency houses some of the most sensitive information there is.

We hear that concern. Here’s where Lauris stands, and a few straightforward things your team can do.

Where Lauris stands

Security isn’t something we added on recently. We continue to add protections as the landscape shifts. Here’s what’s in place for your agency today.

You can turn on multi-factor authentication for your team, so logging in takes a secure token along with the password, and your administrators decide how often it’s required. You also have an Audit Log Report that tracks logins, changes to data, and administrative actions, so when you need to answer who did what and when, the record is already there. And password resets are self-service, with verification steps built in, which means no one hands a password to a coworker to move things along.

No system is airtight, ours included, and it’s smart to be cautious. What we can tell you is that we’ve been supporting behavioral health since 1999, and we treat your clients’ records the way we’d want ours treated.

A few simple habits

1. Use long passwords, and don’t reuse them. Four unrelated words you can picture beat a short password with symbols wedged in, and you’ll actually remember it. Keep your work password out of your other accounts.
   

1. Turn on two-factor authentication wherever it’s offered. That second step, usually a code or a token, is one of the few protections that still helps after a password has been stolen. In Lauris, your administrator turns it on.
   ‍
2. Add layers where you can. Give each person their own login, with only the access their role needs. Shared accounts make an audit log much less useful, and they’re how access outlives employment.
   

1. Be thorough when someone leaves. Close their login the day they go, not at the end of the month. Same for a student or intern whose rotation has ended.

Let’s talk it through

If you’re wondering what all of this means for your agency, we’re glad to talk it through. That might mean a look at your multi-factor settings, or pulling an audit log so you can see what it captures.

And if you’re still deciding whether Lauris is a fit, that’s a fine place to start too. No pitch. We’ll tell you what we do and what we don’t.

Connect with Lauris Online and we’ll find a time.