Blog
EMS Cybersecurity Insights & Resources
Tabletop Exercises That Don't Waste a Chief's Afternoon
Four EMS-relevant tabletop scenarios, the injection format that produces a decision list, and the after-action template that gets used instead of filed.
Fire/EMS Agency Merger: The Cybersecurity Questions Nobody Asks
Data classification, license portability, vendor timelines, and identity management questions you need to answer before merging two public-safety networks.
Mutual Aid and the Data-Sharing Agreement You Don't Have
When units cross jurisdictional lines on a mutual aid call, patient data crosses too. Most agencies lack DUAs and unified IR plans across multiple MSPs.
SCBA Telemetry Cloud Risk and Fireground Dependency
Modern SCBA telemetry depends on vendor cloud dashboards. Here's what happens when the cloud goes dark during a working fire.
Thermal-Imaging Cameras on the Network: A New Attack Surface
Modern FLIR and Bullard TICs connect to truck Wi-Fi. Default credentials and poor segmentation create a backdoor into your operational network.
Hydrant, Hydraulics, and Water System Data Disclosure Risks
Fire departments publish tactical water supply data on open portals. A records-management approach that protects mission data without breaking transparency.
AI Dispatch Transcription — Hidden PHI in the Output
AI transcription of 911 dispatch audio creates a PHI exposure at the LLM stage. What agencies need in the contract before signing.
Wearables on Duty — Smartwatch PHI Risks and Agency Policy
Smartwatches and smart rings on first responders collect data in patient care zones. Agencies need a policy for BYOD wearables, whether issued or personal.
EMS Telemedicine Integration: BAA Chain and Security Architecture
How to secure the provider-on-the-truck telehealth workflow for community paramedicine and ET3, with the BAA chain and link-drop failure modes.
Portals and HIPAA Right of Access for EMS: Timelines, Audit Logs
The HIPAA Right of Access timeline, what an EMS patient portal needs, and why ePCR audit logs might not hold up in an OCR investigation.