The IT challenges medical practices face
A practice runs on systems that have to work at the first appointment of the day: the EHR, practice management, imaging, e-prescribing, patient portals and front-desk check-in. When one stalls, the waiting room fills. At the same time, HIPAA requires that patient data is protected and that the protection is documented.
Security and compliance
We offer HIPAA compliance training for staff and support the systems and controls behind your risk analysis or audit. Your practice, or an assessor you choose, performs the risk analysis. We put the controls in place that it calls for: encryption on every device, multi-factor authentication, access reviews, audit logging and tested backups. Strong encryption and access controls reduce the chance that a lost laptop or a phished password becomes a reportable breach.
Software we work with
We keep the systems behind your EHR and practice management software running: the workstations, network, user access and backups. Your EHR vendor supports the application itself, and we work the case with them when a problem crosses the line. We also support imaging workstations, e-prescribing, patient portals and the business tools every practice uses, such as QuickBooks and Microsoft 365. Common examples include EHR and practice management systems such as athenahealth, eClinicalWorks, NextGen and ModMed, along with e-prescribing, patient portals and fax-to-EHR tools.
How we help
- Secure, monitored workstations and networks for exam rooms and the front desk.
- Encryption, MFA and access controls for patient data.
- Separate guest Wi-Fi so patients never share a network with clinical systems.
- Backups and recovery planning for practice systems.
- HIPAA compliance training for staff, with completion records.
If data is exposed
A breach of patient records falls under the HIPAA Breach Notification Rule as well as the law of each state where your patients live. Encryption, multi-factor authentication and good logging make a breach less likely and much easier to scope. Our guide to data breach notification laws explains the deadlines and who to notify.
Getting a quote
Every quote is written for your environment after a short call about your users, devices and the systems you rely on. Agreements are longer-term rather than month to month, which gives us time to document your systems and close security gaps properly. Request a quote.