Blog
EMS Cybersecurity Insights & Resources
Public-Safety Cyber Mutual Aid: The Idea Whose Time Has Come
How neighboring agencies can share incident response capacity the same way they share apparatus, with the legal and BAA structure that makes it work.
ImageTrend, ESO, and Zoll Online: A Security-Posture Evaluation Framework
A vendor-neutral rubric for evaluating ePCR platform security at renewal time, with specific questions to send ImageTrend, ESO, and Zoll Online.
AI Dispatch Transcription — Hidden PHI in the Output
AI transcription of 911 dispatch audio creates a PHI exposure at the LLM stage. What agencies need in the contract before signing.
Wearables on Duty — Smartwatch PHI Risks and Agency Policy
Smartwatches and smart rings on first responders collect data in patient care zones. Agencies need a policy for BYOD wearables, whether issued or personal.
Vendor Risk Management for Small EMS Agencies Without a CISO
How to manage vendor risk for a small EMS agency without a CISO. A lean 80-20 approach focusing on the vendors that handle PHI and keep the trucks running.
Your ePCR Vendor's BAA Probably Isn't Enough
Most ePCR BAAs meet the vendor's minimum, not yours. Here are the clauses and redline questions EMS agencies should send back before signing.