Advanced 90 min 5-10 players Requires HIPAA Pack
Protected health information for thousands of patients has been compromised, triggering HIPAA's strict 72-hour breach notification requirements. This healthcare-focused tabletop exercise puts your team under intense regulatory pressure while balancing patient safety, media scrutiny, and an active OCR investigation. Participants will work through breach risk assessments, individual and media notifications, state attorney general reporting, and the operational challenges of maintaining patient care during a major cyber incident in a clinical environment.