Blog
EMS Cybersecurity Insights & Resources
CJIS Compliance for Fire and EMS: The Shared CAD Problem
Fire and EMS agencies accessing NCIC data through shared CAD systems face CJIS audit failures on personnel screening, MFA, and data segregation.
Paging App Security for Fire and EMS — Active911, IamResponding Threat Model
A practical threat model for Active911, IamResponding and similar paging apps covering the data pipeline, location privacy, and vendor renewal questions.
Drone Footage at Fire Scenes: Chain of Custody, HIPAA, and the Cloud Security Default You Did Not Configure
Every fire department I work with has a drone now, maybe two. They bought it for thermal imaging on structure fires and scene overviews on MVCs, plus searc
State Breach Notification Laws and the EMS Multi-Jurisdictional Problem
Somewhere right now, an EMS director is trying to figure out how many states they need to report a breach to. The ePCR vendor called at 4 PM on a Frid
42 CFR Part 2 in the Field: Substance-Use Disorder Confidentiality That HIPAA Doesn’t Cover
Most EMS agencies know HIPAA cold. They train on it at orientation, build their ePCR workflows around it, audit for it. And then 42 CFR Part 2 walks in thr
Crew Phones and Social Media at the Scene: A HIPAA Framework Built for Reality
A practical HIPAA framework for EMS agencies managing crew phone photos, social media posts, and scene documentation on personal devices. No blanket bans, just real workflows.
Public Records Security: What To Never Release
A public safety security review: what records adversaries request, the statutory exemptions, and a review process every agency needs.
Cyber Insurance for Small EMS and Volunteer Fire Services — The Clauses That Matter
What the policy clauses, MFA warranties, ransomware sublimits, and IR panel restrictions actually mean for small EMS and volunteer fire departments.
The Offboarding Gap That Leaves ePCR Access Open for Days
The gap between HR termination and ePCR access revocation in EMS agencies. How ImageTrend, ESO, and Zoll sessions stay alive and the same-day checklist that kills them.
BEC Against EMS Billing: The ACH Form That Costs Six Figures
EMS agencies lose six figures to BEC attacks on billing staff. Here is how the ACH change form scam works and the dual-approval workflow that stops it.