Practical security writing for medical and dental practices
Written for practice admins and owners at clinics with roughly 5 to 100 staff. No fear tactics, no free assessments, just what good looks like.
Latest writing
What Underwriters Ask For Now (Evidence, Not Theater)
What cyber insurance questionnaires ask small practices about MFA, backups, and EDR, and the evidence a practice admin should have ready before signing.
Read the postFront Desk Security Is Program Security
Front desk habits are where outpatient program security shows up day to day: badges, PHI at reception, shared logins, EHR workstations, and MSP handoffs.
Read the postHIPAA Risk Assessment for Outpatient Practices
A plain-language guide to HIPAA risk assessments for small outpatient clinics. What it covers, how long it takes, and what happens after.
Read the postOutside Look: Four Lenses That Beat a Checklist
A checklist tells you what to do. Four outside lenses tell you why it matters. Here is how outpatient practices get more from a security review.
Read the postHIPAA Security Risk Analysis: What Practices Get Wrong
The most common HIPAA security risk analysis mistakes for practices with 5 to 100 staff, and how to fix them without a free assessment or a checkbox PDF.
Read the postHIPAA Compliance Guide for Practice Admins (Short)
A short HIPAA compliance guide for practice admins and owners at 5 to 100 staff clinics. What to keep current, what to ignore, and when to scope a flat-fee assessment.
Read the postHIPAA Security Rule: What Good Looks Like for Practices with 5 to 100 Staff
A practical picture of HIPAA Security Rule readiness for outpatient practices. Administrative, physical, and technical safeguards without enterprise theater.
Read the postImmutable Backups, Ransomware, and Insurance Evidence for Practices
Why cyber insurers ask for immutable or offline backups and a dated restore test. A practical evidence checklist for medical and dental practices.
Read the postMFA Hardening for Practices: Google Workspace and Microsoft 365
Short MFA hardening checklists for Google Workspace and Microsoft 365 in medical and dental practices. Evidence carriers ask for, without enterprise theater.
Read the postHarborline · Contact
Ready to talk?
A 30-minute scoping call covers your setup, your deadlines, and what a fixed-fee engagement would look like.