Primary care health providers and Family Health Teams (FTHs) 

Establish and Maintain a Cybersecurity Program:
Build a comprehensive cybersecurity program aligned with CyberSecure Canada certification requirements.

Risk Management and Controls Alignment:
Access relevant cybersecurity risk scenarios and align controls to mitigate risks effectively, ensuring patient data protection and compliance.

Policy Management:
Draft, manage, and streamline cybersecurity policies, ensuring alignment with organizational risks, standards, and requirements. Distribute policies to staff and oversee updates.

Vendor Management:
Collaborate with IT service providers and manage vendor security postures by issuing questionnaires, verifying certifications, and ensuring alignment with CyberSecure Canada standards.

Compliance Oversight:
Monitor organizational compliance with privacy standards and prepare evidence for certification audits.

Policy Access and Compliance:
Access organizational policies to ensure adherence to cybersecurity and privacy standards in patient care.

Training and Awareness:
Complete cybersecurity training to understand risks and support the organization’s compliance objectives.

Incident Reporting:
Report incidents affecting patient data or operations through Maple GRC for streamlined resolution and documentation.

Certification Support:
Assist with organizing documentation and evidence to support CyberSecure Canada certification efforts.

Compliance Tracking:
Use Maple GRC to monitor and co-ordinate compliance efforts and progress to maintain readiness for audits.

Incident Reporting:
Report incidents affecting patient data or operations through Maple GRC for streamlined resolution and documentation.

Control Implementation and Verification:
Access Maple GRC for step-by-step guidance on implementing and verifying cybersecurity controls required for certification.

Evidence Upload:
Submit necessary evidence directly into Maple GRC to streamline the certification process.

Cybersecurity Oversight:
Review dashboards and updates in Maple GRC to gain insights into the organization’s cybersecurity risks and mitigation strategies.

Strategic Governance:
Ensure resources are allocated effectively to support cybersecurity initiatives and compliance efforts.

Accountability:
Use Maple GRC to confirm the Family Health Team’s adherence to governance and privacy standards.