Cybersecurity Incident Response Plan

Produce a practice-ready cybersecurity incident response plan (IRP) plus the role-specific playbooks, communication templates, and evidence-preservation checklists a dental office actually executes during the first 72 hours of a suspected ransomware, business-email-compromise, AI-powered phishing, or unauthorized-PHI-access event. The output covers detect, contain, eradicate, recover, and notify — and produces the artifacts the practice needs to satisfy the HIPAA Breach Notification Rule's 60-day patient notice deadline, the proposed 2026 HIPAA Security Rule's 72-hour incident reporting requirement, OCR notification (immediate for breaches affecting 500+, end-of-year roll-up for under 500), state attorney-general notice where required, and cyber-insurance carrier first-notice-of-loss timing.