General Updates

Cybersecurity Best Practices*

To keep information safe for you and your clients, here are some best practices:

Watch what you click (Phishing)

Phishing is an online scam where attackers send fraudulent messages or emails trying to trick you into revealing sensitive information, such as passwords, bank information, and other critical information.

Passwords

Passwords are the way into your online accounts for you and a bad actor. Password vaults are a simple, and secure way to use unique, strong passwords for each online account. Leverage vaults for personal and business online accounts.

Multi-factor Authentication

Multi-factor authentication (MFA) is used along with your password as a second way to verify yourself. MFA can be done through SMS messaging, authenticator apps, or fido keys. Any important accounts such as financial or health records should have MFA enabled.

Using a Virtual Private Network

Virtual Private Networks (VPN) help protect your data by masking your IP address and encrypting the connection. It is always a good idea to use a VPN connection when using public Wi-Fi, such as airports and hotels. Not all VPN providers are the same; complete your research before deciding on a provider.

Encryption

Encryption protects you from malicious access to files within your desktop, laptop, tablet, or phone. If your device is ever stolen or lost, your password alone will not protect you, it must be encrypted.

Make sure to keep your encryption password safe and secure; if it’s lost, there is no recovery.

How to turn on device encryption:

Antivirus (Endpoint Protection)

Antivirus protection will help in detecting, blocking, and removing viruses, malware, and ransomware from your device.

Enable Automatic Updates

Maintaining up-to-date operating system updates on your devices is important as they help prevent common attacks.

How to enable automatic updates:

Least Privilege Access & Off-Shore Access to Member PHI
  • Agents and those they have designated are provided access to the Select Health LINK tool on a per user basis (user unique accounts).
  • This access is granted with the agreement that offshore access is strictly prohibited.
Building/Office/Home Security

Many burglaries and thefts can be prevented by implementing office safeguards.

  • Strong doors, locks, video cameras (offsite storage, power backups), and alarm systems (cellular based) with unique codes.
  • Secure/shred any unsecured or unneeded documents (cleaning services, wandering visitors)
  • Secure voice assistants—like Alexa, Google Assistant, Siri, and others—to remain compliant and to protect client information. Check your setting options or the manufacturer’s website to learn more.
Offsite Secure Backups

Backups are an essential way to ensure business continuity. Remember that backups should be secured just like your onsite systems. Carefully consider your approach to ensuring your backups are adequately protected. Use encryption.

YouTube Channel Resources:

For easy-to-follow tips and tutorials to help protect your data, there are many free resources available from a variety of experts online. Below are some YouTube channels to help educate and better protect yourself.

If you believe personal information has been compromised (i.e., stolen equipment, data leaks, etc.), please report it to your Compliance Officer and let Select Health know right away of any issues involving Select Health member PHI.

*As a convenience to you, links have been provided to information on other Internet sites. Select Health does not endorse any third-party site, its information, services, or merchandise, and is not responsible for the accuracy, accessibility, privacy, or security of information provided by any external website.

Colorado Appointment

Select Health is preparing to offer Individual and Family commercial and Medicare plans in Colorado beginning in 2024! Agents interested in becoming appointed may contact Agent Relations at Agent.Relations@selecthealth.org or 801-442-4908.