Human Layer Defense.
Practical AI-Era Security Training.
45-minute interactive "Lunch & Learn" sessions engineered for non-technical clinic receptionists, hygienists, and office managers. Turning front-desk staff from prime targets into active human firewalls.
Generative AI Social Engineering
Attackers now use AI to generate flawless impersonations of Ontario dental labs, insurance carriers, and suppliers.
Mandatory Underwriter Requirement
Canadian cyber insurance applications specifically mandate verifiable annual staff cybersecurity awareness training.
No-Blame Immediate Stop Rule
Training staff to report suspicious clicks in the first 2 minutes instead of hiding mistakes out of fear of discipline.
Curriculum Tailored to Clinics
The 4 Practical Training Modules
Delivered either remotely via Zoom/Teams or on-site during a Friday lunch hour. Zero confusing technical jargon.
AI Phishing & Impersonated Lab Files
How modern cybercriminals scrape local Ontario clinic directories and spoof well-known dental labs (e.g., Protec, Aurum) or health insurance carriers with malicious attachments.
- Inspecting actual sending email domains behind friendly display names.
- Recognizing hidden executable files (.pdf.exe, .zip, .iso).
- Detecting QR code phishing (quishing) printed on fake mailers.
The Urgent Wire & Supplier Invoice Trap
Business Email Compromise (BEC) attacks targeting clinic managers with urgent requests to change direct deposit details or pay equipment invoices before 5:00 PM.
- Mandatory Two-Channel Verification Rule for all banking changes.
- Why executive email requests for gift cards or wires require verbal callback.
- How to spot subtle domain typos (e.g., `clinic-office.ca` vs `clinicoffice.ca`).
PHIPA Privacy & Credential Hygiene
Satisfying Royal College (RCDSO/CCO) and Information and Privacy Commissioner of Ontario (IPC) technical safeguard guidelines across daily operatory routines.
- Abolishing shared reception logins to maintain individual audit trails.
- Enforcing workstation screen locking (
Win + L) when stepping away. - Prohibiting patient chart photos over personal smartphones or consumer messaging apps.
The Front-Desk "Immediate Stop" Protocol
What an employee must immediately do if they accidentally clicked a malicious link or typed credentials into a deceptive portal.
- Immediate physical isolation: disconnect Ethernet and Wi-Fi within 60 seconds.
- Establishing a psychological safety policy: zero penalty for rapid honest reporting.
- Fast password resets from an uninfected secondary phone or tablet.
Staff Awareness & AI Deception Workshop
Everything required to educate your clinic staff and satisfy the annual cyber training mandate for your insurance renewal file.
Frequently Asked Questions
Common Inquiries Regarding Training
Can this session be scheduled during lunch or after clinic hours?
Yes. Most clinics host this as a Friday "Lunch & Learn" (12:00 PM – 1:00 PM) or an evening session right after appointments wrap up. We tailor our timing so no patient care is interrupted.
Does this satisfy our cyber insurance underwriter training mandate?
Yes. Major Canadian underwriters (Chubb, Travelers, Cowbell, Beazley) require evidence that staff complete annual cyber awareness training. We issue a formal signed Certificate of Completion and an employee attendance roster directly for your broker.
Is the training overly technical for non-IT staff?
Not at all. The entire presentation uses visual, real-world examples specifically focused on dental, medical, and administrative workflows—such as inspecting invoice PDFs, avoiding fake patient intake links, and preventing urgent wire fraud.
Empower Your Team Against AI-Era Cyber Threats
Schedule a 45-minute interactive security workshop for your clinic staff and receive immediate compliance certification.
Schedule a Staff Workshop