[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"detail-sidebar-cat-1-en-105":3,"doc-seo-248527-105":53,"doc-detail-248527-en":126},{"code":4,"msg":5,"data":6},0,"success",[7,14,19,24,29,34,39,44,49],{"id":8,"doc_module":9,"doc_module_name":10,"category_name":11,"show_sort_weight":12,"slug":13},11,1,"Template","Presentations",90,"presentations",{"id":15,"doc_module":9,"doc_module_name":10,"category_name":16,"show_sort_weight":17,"slug":18},12,"Resumes",80,"resumes",{"id":20,"doc_module":9,"doc_module_name":10,"category_name":21,"show_sort_weight":22,"slug":23},14,"Invoices",70,"invoices",{"id":25,"doc_module":9,"doc_module_name":10,"category_name":26,"show_sort_weight":27,"slug":28},15,"Posters",60,"posters",{"id":30,"doc_module":9,"doc_module_name":10,"category_name":31,"show_sort_weight":32,"slug":33},16,"Social Media",50,"social-media",{"id":35,"doc_module":9,"doc_module_name":10,"category_name":36,"show_sort_weight":37,"slug":38},17,"Forms",40,"forms",{"id":40,"doc_module":9,"doc_module_name":10,"category_name":41,"show_sort_weight":42,"slug":43},18,"Letters",30,"letters",{"id":45,"doc_module":9,"doc_module_name":10,"category_name":46,"show_sort_weight":47,"slug":48},21,"Paper Templates",5,"papers-templates",{"id":50,"doc_module":9,"doc_module_name":10,"category_name":51,"show_sort_weight":4,"slug":52},158,"General","general-158",{"code":4,"msg":54,"data":55},"ok",{"site_id":56,"language":57,"slug":58,"title":59,"keywords":60,"description":61,"schema_data":62,"social_meta":119,"head_meta":121,"extra_data":123,"updated_unix":125},105,"en","top-recommendations-security-technology-assessments-report","Top Recommendations - Security & Technology Assessments Report","","Top Recommendations synthesizes findings from 65 Security & Technology Assessments conducted at Vancouver family practice clinics between June 2024 and February 2025. Clinics participated under the PMH Connectivity & Digitization Program, receiving 1–2 hour on-site consultations, tailored reports, and follow-up support from a security expert. The report highlights the most frequent, category-based recommendations across six assessment areas, with an advisory note clarifying that recommendations are not exhaustive and require clinic-specific adoption decisions with IT or external security expertise.",{"@graph":63,"@context":118},[64,80,101],{"@type":65,"itemListElement":66},"BreadcrumbList",[67,71,74,77],{"item":68,"name":69,"@type":70,"position":9},"https://docshare.wps.com","Home","ListItem",{"item":72,"name":10,"@type":70,"position":73},"https://docshare.wps.com/template/",2,{"item":75,"name":51,"@type":70,"position":76},"https://docshare.wps.com/template/general/",3,{"item":78,"name":59,"@type":70,"position":79},"https://docshare.wps.com/template/top-recommendations-security-technology-assessments-report/248527/",4,{"url":78,"name":59,"@type":81,"image":82,"author":87,"headline":59,"publisher":90,"fileFormat":93,"inLanguage":57,"description":61,"dateModified":94,"datePublished":95,"encodingFormat":93,"isAccessibleForFree":96,"interactionStatistic":97},"DigitalDocument",{"url":83,"@type":84,"width":85,"height":86},"https://docshare.wps.com/thumbnails/top-recommendations-security-technology-assessments-report/248527.png","ImageObject",442,249,{"name":88,"@type":89},"Himbo","Person",{"url":68,"name":91,"@type":92},"DocShare","Organization","application/pdf","2026-09-19","2026-09-12",true,{"@type":98,"interactionType":99,"userInteractionCount":9},"InteractionCounter",{"@type":100},"ViewAction",{"@type":102,"mainEntity":103},"FAQPage",[104,110,114],{"name":105,"@type":106,"acceptedAnswer":107},"What is the purpose of the Top Recommendations report?","Question",{"text":108,"@type":109},"It compiles the most frequent recommendations from Security & Technology Assessments performed at Vancouver family practice clinics, helping clinics understand common areas for improvement.","Answer",{"name":111,"@type":106,"acceptedAnswer":112},"How were the assessments delivered to each clinic?",{"text":113,"@type":109},"Each assessment included a 1–2 hour on-site consultation with a security expert, a customized findings and recommendations report, and follow-up support to address clinic-specific questions.",{"name":115,"@type":106,"acceptedAnswer":116},"Why is MFA recommended, especially when IP restrictions are not enabled?",{"text":117,"@type":109},"MFA adds an extra layer of security and identity verification to help ensure only authorized users access patient records, which is particularly important if attackers could log in from anywhere with stolen credentials.","https://schema.org",{"og:url":78,"og:type":120,"og:title":59,"og:site_name":91,"og:description":61},"article",{"robots":122,"canonical":78},"index,follow",{"doc_id":124,"site_id":56},248527,1789246447,{"code":4,"msg":5,"data":127},{"doc_id":124,"user_id":128,"nickname":88,"user_avatar":129,"doc_module":9,"category_id":50,"category_name":51,"doc_title":59,"doc_description":61,"doc_content":130,"file_id":131,"file_url":132,"file_type":133,"file_size":134,"view_count":9,"is_deleted":4,"is_public":9,"is_downloadable":9,"audit_status":9,"page_count":25,"language":135,"language_code":57,"site_id":56,"html_lang":57,"table_of_contents":136,"faqs":137,"seo_title":138,"seo_description":61,"update_tm":125,"read_time":47},687197100911,"https://ap-avatar.wpscdn.com/avatar/a000239b6f1da00475?x-image-process=image/resize,m_fixed,w_180,h_180&k=1785132997149421697","Report: Top Recommendations  \nBased on the 65 Security & Technology Assessments performed  \nat Vancouver family practice clinics between June 2024-February 2025.  \nFrom June 2024 to February 2025, Vancouver  \nprimary care clinics were invited to participate in a Security & Technology Assessment as part of the PMH Connectivity & Digitization Program. Each assessment included a 1-2 hour on-site consultation with a security expert, a customized report outlining findings and recommendations for improving clinic security, as well as follow up support with the security consultant to address clinic specific questions.  \nMany participants expressed interest in understanding broader trends observed across clinics in the Vancouver area – particularly  \ncommon cyber security challenges and areas for improvement.  \nBelow, we share the most frequent recommendations from each of the six assessment categories. While the examples here reflect common findings, each clinic received a tailored report with recommendations specific to their context and capacity for implementation.  \nAdvisory Note: The recommendations in this report are based on the most commonly made recommendations made during the Security and Technology Assessments performed from June 2024 to February 2025. They are not a comprehensive or complete list of all security measures a clinic should take to protect patient data and security. We advise that clinics seek the expertise of their IT provider/lead or an external security expert for decision making regarding the adoption of any recommendations.  \nEMR Security  \n\n| Summary  |  |\n| --- | --- |\n| The EMR Security assessment evaluated best practices around EMR security settings and workflows that ensure patient data is protected from unauthorized access.\u003Cbr>Overall, a slight majority of clinics received an assessment rating of ‘Adequate’ or‘Robust’, indicating a fair level of existing awareness around best practices for ensuring security in EMR application management. | \u003Cbr>Rating distribution across all clinics |\n\nHere are the top 3 detailed EMR Security recommendations provided to clinics.  \nRecommendation Priority Level Frequency  \n\n| Enable IP restrictions | \u003Cbr>Medium | \u003Cbr>93% of clinics |\n| --- | --- | --- |\n| Enable MFA (Multi-Factor Authentication) | Medium | 68% of clinics |\n| Disable concurrent sessions | Medium | 58% of clinics |\n| Detailed Recommendations |  |  |\n\nEnable IP restrictions – Medium priority  \nYou do not have IP restrictions enabled, which means that anyone who gains access to your login credentials will be able to log in from anywhere to view patient data. Consider enabling IP restrictions so only devices on the clinic network, or at practitioners'homes, can log in to your EMR. Another related feature to consider is geo-restricting  \naccess, so your EMR cannot be accessed by IP addresses outside of a list of permitted countries. Note that if you enable IP restrictions and thereby disable remote access to your EMR, practitioners will need to either use a VPN, or your EMR administrator will have to add all of your practitioner's home IPs to the list of allowed IPs. The VPN approach is preferable, as it will work consistently regardless of the location the practitioner is in andwill ensure that they only access your EMR through the secure clinic network. The DTO's Health Technology team has both expertise in your EMR, and can make recommendations to help you decide on which VPN will suit your practice's needs best. They can be reached by emailing the main [PSP contact email at](PSP contact email at psp@doctorsofbc.ca)[ ](PSP contact email at psp@doctorsofbc.ca)[psp@doctorsofbc.ca](PSP contact email at psp@doctorsofbc.ca), where your inquiry will be redirected to the Health Technology team who can help guide you through these choices and how to integrate them with your EMR and practice workflow.  \nReference:  DTO Recommendations for VPN Setup and Usage  \nReference: CHR guide on restricting IP addresses  \nEnable MF","cbCaiq4B7jIJEQJS","https://ap.wps.com/l/cbCaiq4B7jIJEQJS","pdf",314928,"English","# Report Overview\n# EMR Security\n## Summary\n## Top 3 Recommendations\n### Enable IP restrictions\n### Enable MFA (Multi-Factor Authentication)\n### Disable concurrent sessions\n# PC Security","[{\"question\":\"What is the purpose of the Top Recommendations report?\",\"answer\":\"It compiles the most frequent recommendations from Security \\u0026 Technology Assessments performed at Vancouver family practice clinics, helping clinics understand common areas for improvement.\"},{\"question\":\"How were the assessments delivered to each clinic?\",\"answer\":\"Each assessment included a 1–2 hour on-site consultation with a security expert, a customized findings and recommendations report, and follow-up support to address clinic-specific questions.\"},{\"question\":\"Why is MFA recommended, especially when IP restrictions are not enabled?\",\"answer\":\"MFA adds an extra layer of security and identity verification to help ensure only authorized users access patient records, which is particularly important if attackers could log in from anywhere with stolen credentials.\"}]","Top Recommendations - Security & Technology Assessments Report | PDF"]