The US is the biggest target of scammers, grifters, and state threat actors. We have no choice but to modify the infrastructure and improve the systems and software that we’re using. It's going to take years to adapt to it all. Along the way, we're going to have to make changes, and to do that will require that we, medical practices and clinics, stay aware and keep up with them.
If you are responsible for networks, you're going to need to do a better job of updating firmware. You're also going to need to schedule new hardware installations. More people are going to be bringing their own devices into work, and you're going to need to have better ways of allowing those devices into your facilities. People are going to be using an OS that will become more structured and more security-aware. We need to have a clear delineation between personal and business, while at the same time, we are blurring the lines between our personal and business lives.
Every business is going to have to have a strategic consultant that does at least an annual process and system review of even small companies. Starting now and reducing the catch up will make it less painful because you'll be able to spread changes out over time instead of doing them all at once and allowing it to be disruptive to your staff and patients.