During a cyber incident, the people leading the response are short on time and sleep. Staff want to know whether to log in. Families are calling the front desk. A hospital partner wonders whether transfers are affected. If no one has prepared messages, each answer is improvised, and improvised answers contradict each other.
A communications template kit solves this. It is a small set of pre-approved drafts that can be adapted in minutes. Prepare them now, review them with legal counsel and keep them somewhere reachable even if your systems are down.
Be accurate. Say only what you know. Do not speculate about cause or scope.
Be calm and plain. Avoid technical jargon and avoid alarming language.
Say what people should do. Every message should include a clear instruction, even if it is "no action is needed."
Name a contact. People want to know whom to ask.
Promise updates, then deliver them. Give a time for the next message.
Do not assign blame or promise outcomes such as "no information was taken" unless confirmed.
Have your attorney and, if applicable, your cyber insurer review the kit. Notices about protected health information carry legal requirements under the HIPAA Breach Notification Rule, and early statements can affect later obligations.
Purpose: tell employees what to do right now.
We are experiencing a technology issue affecting [systems]. Please [do not log in / use paper downtime procedures / avoid opening email attachments]. Continue resident care using downtime forms located [location]. Your supervisor will provide updates by [time]. Questions go to [name and phone].
Purpose: concise factual update.
At [time], we identified [brief description]. Systems affected: [list]. Care operations: [status]. Actions underway: [list]. Outside help engaged: [IT partner, counsel, insurer]. Next update: [time].
Purpose: reassure residents in simple language, delivered in person where possible.
You may notice staff using paper forms today because of a computer issue. Your care is not affected. If you have questions, please ask your nurse or [name].
Purpose: answer the first questions before they are asked.
We want you to know that [community] is experiencing a technology disruption. Resident care and safety continue as normal. We are working to restore systems and will update you by [time]. If you have questions, please call [number].
If protected health information may be involved, a separate formal notice will be needed, and its wording and timing should be decided with counsel.
Purpose: let hospitals and physicians know how to reach you.
We are experiencing a systems issue. Admissions and transfers are [continuing with paper processes / temporarily paused]. For urgent clinical communication, please call [number]. We will update you by [time].
A few sentences that every receptionist can read aloud, plus guidance on routing media or unusual calls to the communications lead.
We are aware of a technology issue and are working to resolve it. Resident care is continuing. We will share more information when it is available.
These are not simple templates and should be prepared with counsel. Keep a list of required notification contacts and timelines, but do not attempt to draft notices to regulators or affected individuals without legal review.
Store copies offline. Keep printed and offline copies with your incident response plan.
Assign approval. Decide in advance who may approve and send each message.
Keep a log. Record each message, the time sent and the audience.
Update your lists. Maintain current contact lists for staff, families and partners, with after-hours numbers.
Practice. Include drafting a message in your next tabletop exercise.
UnityCare IT helps healthcare and senior-living organizations prepare incident plans and communications kits, and supports the technical side of recovery. Having words ready lets leaders focus on care and recovery.
An outsourced IT department with proactive maintenance and one number to call.
Call or text: 405-285-3845
New customers: start@unitycareit.com
Existing customers: support@unitycareit.com
Address: UnityCare Technologies, 2524 N Broadway Ste 554, PMB 947974, Edmond, Oklahoma 73034-4172