When Should a Company Outsource IT?
Short version: outsource IT when your technology has promises to keep that one or two people can't keep alone. Think 24/7 monitoring, security controls you can prove, compliance...
Strategic Planning
How Do You Know When Your Company Has Outgrown Its IT Setup?
Your company has outgrown its IT setup when the people or provider supporting it spend most of their time reacting instead of planning. The clearest signs are repeat tickets, one...
Why a Hospital CEO Can't Engage a partner Clinically-Aware IT to a Generalist
What Healthcare-Specialty Partnership Actually Means Healthcare-specialty experience HIPAA program leadership capability Clinical workflow understanding HITRUST or healthcare...
What "Minimum Necessary" Actually Means in Modern Clinical Workflow, and Where Execs Lose Visibility
What the Minimum Necessary Standard Actually Requires Purpose limitation: ePHI accessed only for stated purposes. Need limitation: only what is needed for the purpose....
Risk Analysis vs Risk Assessment vs Risk Management: The Framing Every Healthcare Exec Needs
Why Risk Analysis, Risk Assessment, and Risk Management Are Not Interchangeable A healthcare CEO walking into the next executive review is rarely asked to distinguish between Risk...
Internal IT or Managed IT: Which Is Right for Your Company?
Internal IT is the right choice when your company needs someone on site every day who knows your people, your equipment, and your quirks. Managed IT is the right choice when you...
.png?width=1200&height=628&name=Blog%20banner%20Who%20Gets%20Paged%20at%202%20A.M@1x%20(1).png)
Which Co-Managed IT Services Support Overworked Internal IT Teams?
The co-managed IT services that best support an overworked internal IT team take over the work that never stops or needs rare skills: 24x7 security monitoring, patch management,...
What Good Looks Like: A Vendor Risk Management Program for Healthcare Under HIPAA (The CFO Governance View)
The Five Functions a Defensible Healthcare Vendor Risk Program Must Operate Tiering and inventory of all vendors handling ePHI. Due diligence proportional to vendor criticality....
What a Vendor BAA Actually Obligates the Vendor To, and What It Does Not: The CEO Accountability View
Where the Vendor's BAA Obligations End and the CEO's Program Begins A healthcare CEO whose organization runs on cloud, software-as-a-service, or any third-party platform handling...
The HIPAA Security Rule Is Changing: What a Healthcare CEO Needs
Why the HIPAA Security Rule Is Being Revised — And What Changed Since 2013 The HIPAA Security Rule's last meaningful update came through the Omnibus Rule in 2013. In 2013, the...
