Pediatric Dental Office and Personnel Security

Board takeaway

• Prepare a workplace safety plan that covers people, information, property, and continuity of care.
• Combine administrative responsibilities and training, technical information safeguards, and physical protections.
• Rehearse the response to threats and disasters, and retrain when the plan, personnel, infrastructure, or foreseeable risks change.

Scope and evidence

The policy addresses intrusion, violence, harassment, cyberattacks, and environmental disasters. These require planning beyond facility, OSHA, and HIPAA compliance. Dental-specific evidence for some security strategies is limited; AAPD supports staff preparation and further research. Treatment-related safeguards are covered in Patient safety.

Three layers of protection

Adopt a zero-tolerance policy promoting a safe, respectful workplace; pair it with de-escalation training and an emergency response plan.

• Theft risks include computers, equipment, controlled substances, and dental records; stolen records can enable financial or medical identity theft.

Cybersecurity and financial threats

• Cyberattacks may interrupt prescriptions, insurance claims, and business operations, with data loss, financial loss, or ransom demands.
• Internal fraud or embezzlement also threatens practice resources.
• The policy cites ADA guidance supporting multifactor authentication, frequent malicious-code scans, updated antivirus/antimalware, spam/phishing filters, and network intrusion filters.

Aggression and harassment

• Threats may come from patients, relatives, visitors, or employees. Dissatisfaction with care, outcomes, fees, scheduling, or perceived disrespect can contribute.
• Recognize physical and nonphysical aggression; sexual harassment may involve gestures, comments, or physical conduct.
• Prevention policies, de-escalation, and emergency procedures may reduce harm.
• Practice communication techniques, safe distancing, and agreed code words through workshops and simulated scenarios.

Active threats and disasters

• Active-shooter training can include moving patients, staff response using Run/Hide/Fight principles, law-enforcement communication, securing areas, and evacuation.
• Hemorrhage-control training, such as STOP THE BLEED, can add emergency skills beyond CPR; this policy does not provide a treatment algorithm.
• Plan for weather extremes and natural disasters. Administrative response plans and structural protections serve different purposes.
• Involve staff in contingency planning; assign patient-movement and rescue-notification roles.
• Maintain emergency contacts, enroll in danger alerts, and train staff to recognize hazards, identify safer locations, and use equipment such as extinguishers and N95 respirators.

Implement and maintain readiness

• Schedule emergency exercises regularly; no fixed interval is specified.
• Retrain after relevant changes or when problems are foreseeable.
• AAPD encourages participation in local emergency-management teams.
• Use the AAPD Disaster Preparedness Resource Hub for templates, checklists, and resources for children in crisis; consult CISA and DHS for emergency preparedness.
• Assign named roles, maintain current contacts, and make retraining triggers part of the office plan.

Common board traps

Answer aloud

How would you structure an office security plan?

Cover three layers:

• Administrative: policies and assigned roles.

• Technical: access controls, firewalls, and encryption.

• Physical: locks, alarms, and safe locations.

• Include patient movement, emergency contacts, de-escalation, and continuity during disruption.

• Practice through regular exercises and retrain when personnel, facilities, or risks change.

A family member becomes threatening. What preparedness should already exist?

The office should already have harassment and violence policies, rehearsed de-escalation techniques, safe-distance and code-word strategies, and assigned emergency responsibilities.

• Staff should know how to summon help and manage patient movement.
• An improvised response after a threat begins is less reliable than a practiced plan.