Most physicians know the basic cybersecurity risks: ransomware, phishing emails, stolen passwords and hackers trying to gain access to patient information.
Artificial intelligence is adding a new risk.
Recent incidents involving AI agents have shown that these systems can do more than answer questions. Some can interact with websites and computer systems, search for information and take actions on their own.
When a security incident occurs, one of the first questions a medical practice needs to answer is: What happened?
Audit logs can help provide that answer. They create a record of activity on your computers, network, and software systems, including systems that contain or use electronic protected health information (ePHI).
by Cindy Sorenti, PMAC, President and CEO Pinnacle Practice Achievement, LLC
September 17, 2026
By justina
0 Comments
Last week’s Pro Tip discussed communicating and documenting general non-compliance. Today let’s specifically discuss what should be happening when high-risk patients miss appointments.
“Does writing or managing a prescription with moderate-complexity medical decision-making (MDM) for an established patient in a podiatric office qualify for CPT code 99214? Furthermore, if this is correct, do CPT codes 99309 (nursing facility) and 99349 (home or residence visit) apply under the same MDM criteria, and why might those specific site-of-service codes be inapplicable depending on the setting or patient status?”