For health centers & FQHCs
Each site’s staff runs a facilitated, 40-minute cybersecurity drill around one screen, in plain language the front desk and billing team can fully participate in — no security background required in the room. Every drill ends with a dated after-action report your risk management program can actually file, and one flat subscription covers your whole organization: every site, every drill.
Why health centers drill
FTCA-deemed health centers maintain an ongoing risk management program — documented staff training, quarterly assessments, board reporting. A dated exercise record with named participants and HIPAA/NIST citations is precisely the kind of artifact those files are built from, and training documentation is one of the most commonly cited gaps.
The after-action report rolls preparedness up by NIST CSF 2.0 function, lists gaps with plain-language fixes, and names who participated. It reads in five minutes — which is what a quarterly risk management report to the board needs to do.
One or two IT people can’t author scenarios, facilitate sessions, and referee answers across every site. Here the library, facilitation, scoring, and paper trail are all handled — your IT team schedules the drills, joins the room, and owns the program without writing a word of it.
How it fits the compliance rhythm
HRSA gives health centers discretion in how they source risk management training — Clinic Tabletop gives you a documented, repeatable option that staff genuinely don’t dread. Run a different scenario each quarter, watch the preparedness trend across repeat runs, and drop the report into the same cycle as your quarterly risk management assessments. Eight scenarios today, localized to each site’s name, EHR, and town, with new ones added at no charge.
One honest caveat, because your compliance team will ask: Clinic Tabletop is an exercise and documentation tool. It doesn’t by itself establish compliance with HRSA, FTCA, or HIPAA requirements — it produces the dated, cited evidence of practice that those programs ask you to be able to show.
Simple for multi-site organizations
Plans are flat per organization — $99/month or $588/year — covering every site, unlimited drills, and everyone in the room, with no per-seat or per-location math. Run drills site-by-site anyway: each site’s team is the one that will live its own bad day, and the reports build a per-site preparedness picture for your risk management program. For PCAs and health center networks, we set up group discount codes and evaluation accounts for your training or compliance staff — talk to us and we’ll sort it out the same day.