The Paubox Zoom social mixer for October 2024 was a roundtable discussion between Paubox customers covering topics like employee training, Verizon outages, AI and EHR integrations, and, similar to previous months, how AI can help in email security.

 

What happened: 

October's social mixer followed our standard format - a candid, unmoderated discussion amongst healthcare IT and cybersecurity professionals.

This month, we covered product ideas, BIMI, DKIM 2048, and DMARC, how to run a phishing campaign, shared blocklists, multi-factor authentication, and how EHRs are beginning to add AI directly into their services.

Related: Understanding BIMI (Brand Indicators for Message Identification)

 

Quote of the day:

  • "Call IT if anything looks suspicious."

 

Our takeaways:

  • Paubox customers want shared blocklists or blocklist templates
  • Employee training is the first line of defense.
    • Send fake phishing emails to train employees to look out for email fraud.
    • Send regular bulletins of current threats
    • One customer has training modules around both email and SMS phishing techniques.
    • Most importantly, employees should be comfortable asking IT when an email looks suspicious.
  • While only one customer was hit by the recent Verizon outages, all had experienced similar issues.
    • When phones are inaccessible, it can block 2FA that relies on SMS.
    • SMS is the least reliable form of MFA.
    • Use password managers with OTPs or email as a backup.
  • Two customers have used StarLink for reliability.
    • Everyone agreed the speeds are impressive, and it's a massive help in rural settings and reservations.
  • A non-PHI use of ChatGPT is to upload an employee handbook and make it easy for employees to ask questions of the AI.
    • Hank.ai was mentioned as a helpful use of AI in healthcare.
  • Customers use AI to review regulations and compliance questions.
  • Will ChatGPT power their new data center with nuclear power?
  • Customers discussed low-tech solutions to hacking and cybersecurity. Sometimes, you just need to turn the servers off.
  • Always change default settings on routers and hardware.
  • Some sources of cybersecurity advice are:

 

The bottom line: Paubox customers use a broad range of tools and strategies to keep their email HIPAA compliant, protect their organizations, and find efficiencies. 

See also: Our playbook for Zoom social mixers

See also: HIPAA Compliant Email: The Definitive Guide