--- title: Five Nines Blog | Strategic Planning description: Strategic Planning | --- [Skip to the main content.](https://blog.fivenines.com/topic/strategic-planning/page/1#main-content) 1-855-817-5959    [help@fivenines.com](mailto:help@fivenines.com) [![FN\_Reverse\_Logo](https://blog.fivenines.com/hs-fs/hubfs/FN_Reverse_Logo.png?width=3022&height=849&name=FN_Reverse_Logo.png "FN_Reverse_Logo")](https://fivenines.com/) [![FiveNinesPrimaryLogo](https://blog.fivenines.com/hs-fs/hubfs/FiveNinesPrimaryLogo.png?width=3022&height=849&name=FiveNinesPrimaryLogo.png "FiveNinesPrimaryLogo")](https://fivenines.com/) - [Solutions](https://fivenines.com/solutions/) - [Managed IT Services](https://fivenines.com/solutions/managed-it-services/) - [Cybersecurity Services](https://fivenines.com/solutions/cybersecurity/) - [Cloud & Productivity](https://fivenines.com/solutions/cloud-productivity/) - [Projects & Enhancements](https://fivenines.com/solutions/it-projects/) - [Placement Services](https://fivenines.com/solutions/onsite-it/) - Industries - [Finance & Banking](https://fivenines.com/industries/banking/) - [Healthcare](https://fivenines.com/industries/healthcare/) - [Legal](https://fivenines.com/industries/legal/) - [Nonprofit](https://fivenines.com/industries/non-profit/) - [Manufacturing & Logistics](https://fivenines.com/industries/manufacturing-logistics/) - [Small & Mid-Sized Businesses](https://fivenines.com/industries/smb/) - [Insights](https://fivenines.com/resources/) - [Resource Library](https://fivenines.com/resources/) - [Blog](https://blog.fivenines.com) - [About](https://fivenines.com/about/) - [About Five Nines](https://fivenines.com/about/) - [Leadership Team](https://fivenines.com/our-team/) - [Community Impact](https://fivenines.com/community/) - [Partnerships](https://fivenines.com/partnerships/) - [Careers](https://fivenines.com/careers/) - [Company News](https://fivenines.com/news/) Let's Talk Get Support Toggle Menu Toggle Menu Let's Talk Get Support - [Solutions](https://fivenines.com/solutions/) - [Managed IT Services](https://fivenines.com/solutions/managed-it-services/) - [Cybersecurity Services](https://fivenines.com/solutions/cybersecurity/) - [Cloud & Productivity](https://fivenines.com/solutions/cloud-productivity/) - [Projects & Enhancements](https://fivenines.com/solutions/it-projects/) - [Placement Services](https://fivenines.com/solutions/onsite-it/) - Industries - [Finance & Banking](https://fivenines.com/industries/banking/) - [Healthcare](https://fivenines.com/industries/healthcare/) - [Legal](https://fivenines.com/industries/legal/) - [Nonprofit](https://fivenines.com/industries/non-profit/) - [Manufacturing & Logistics](https://fivenines.com/industries/manufacturing-logistics/) - [Small & Mid-Sized Businesses](https://fivenines.com/industries/smb/) - [Insights](https://fivenines.com/resources/) - [Resource Library](https://fivenines.com/resources/) - [Blog](https://blog.fivenines.com) - [About](https://fivenines.com/about/) - [About Five Nines](https://fivenines.com/about/) - [Leadership Team](https://fivenines.com/our-team/) - [Community Impact](https://fivenines.com/community/) - [Partnerships](https://fivenines.com/partnerships/) - [Careers](https://fivenines.com/careers/) - [Company News](https://fivenines.com/news/) # Five Nines Blog #### Five Nines Experts Sharing Actionable IT Advice   Filter by Tag Show All AI Banking Business Continuity Case Studies Clinical IT Cloud Infrastructure Company Awards Compliance Copmany News Cyber Insurance Cybersecurity Finance Five Nines HIPPA Compliance Healthcare IT Services IT Tips & Tricks Incident Response Mobile Device Management Multi-Factor Authentication Office 365 Phishing Ransomware Strategic Planning Tech Operations Insights Tech Trends Virtual CIO Webinars ### Strategic Planning [![](https://blog.fivenines.com/hs-fs/hubfs/Blog%20banner%20Who%20Decides%20When%20You%20Outsource%20IT@1x-1.png?width=1200&height=628&name=Blog%20banner%20Who%20Decides%20When%20You%20Outsource%20IT@1x-1.png)](https://blog.fivenines.com/when-should-a-company-outsource-it) #### [When Should a Company Outsource IT?](https://blog.fivenines.com/when-should-a-company-outsource-it) Short version: outsource IT when your technology has promises to keep that one or two people can't keep alone. Think 24/7 monitoring, security controls you can prove, compliance... [IT Services](https://blog.fivenines.com/topic/it-services) [Healthcare](https://blog.fivenines.com/topic/healthcare) [Strategic Planning](https://blog.fivenines.com/topic/strategic-planning) [Cyber Insurance](https://blog.fivenines.com/topic/cyber-insurance) [Compliance](https://blog.fivenines.com/topic/compliance) [Read More](https://blog.fivenines.com/when-should-a-company-outsource-it) [![](https://blog.fivenines.com/hs-fs/hubfs/Blog%20banner%20You%20Outgrew%20the%20Model@1x.png?width=1200&height=628&name=Blog%20banner%20You%20Outgrew%20the%20Model@1x.png)](https://blog.fivenines.com/how-do-you-know-when-your-company-has-outgrown-its-it-setup) #### [How Do You Know When Your Company Has Outgrown Its IT Setup?](https://blog.fivenines.com/how-do-you-know-when-your-company-has-outgrown-its-it-setup) Your company has outgrown its IT setup when the people or provider supporting it spend most of their time reacting instead of planning. The clearest signs are repeat tickets, one... [IT Services](https://blog.fivenines.com/topic/it-services) [Cybersecurity](https://blog.fivenines.com/topic/cybersecurity) [Strategic Planning](https://blog.fivenines.com/topic/strategic-planning) [Cyber Insurance](https://blog.fivenines.com/topic/cyber-insurance) [Read More](https://blog.fivenines.com/how-do-you-know-when-your-company-has-outgrown-its-it-setup) [![Why a Hospital CEO Can't Engage a partner Clinically-Aware IT to a Generalist](https://blog.fivenines.com/hs-fs/hubfs/blog/taya-migration/97-clinically-aware-it-ceo.docx.png?width=960&height=540&name=97-clinically-aware-it-ceo.docx.png)](https://blog.fivenines.com/why-a-hospital-ceo-cant-engage-a-partner-clinically-aware-it-to-a-generalist) #### [Why a Hospital CEO Can't Engage a partner Clinically-Aware IT to a Generalist](https://blog.fivenines.com/why-a-hospital-ceo-cant-engage-a-partner-clinically-aware-it-to-a-generalist) What Healthcare-Specialty Partnership Actually Means Healthcare-specialty experience HIPAA program leadership capability Clinical workflow understanding HITRUST or healthcare... [Healthcare](https://blog.fivenines.com/topic/healthcare) [Strategic Planning](https://blog.fivenines.com/topic/strategic-planning) [Tech Operations Insights](https://blog.fivenines.com/topic/tech-operations-insights) [Clinical IT](https://blog.fivenines.com/topic/clinical-it) [Read More](https://blog.fivenines.com/why-a-hospital-ceo-cant-engage-a-partner-clinically-aware-it-to-a-generalist) [![What ](https://blog.fivenines.com/hs-fs/hubfs/blog/taya-migration/96-minimum-necessary-clinical-coo.docx.png?width=960&height=540&name=96-minimum-necessary-clinical-coo.docx.png)](https://blog.fivenines.com/what-minimum-necessary-actually-means-in-modern-clinical-workflow-and-where-execs-lose-visibility) #### [What "Minimum Necessary" Actually Means in Modern Clinical Workflow, and Where Execs Lose Visibility](https://blog.fivenines.com/what-minimum-necessary-actually-means-in-modern-clinical-workflow-and-where-execs-lose-visibility) What the Minimum Necessary Standard Actually Requires Purpose limitation: ePHI accessed only for stated purposes. Need limitation: only what is needed for the purpose.... [Healthcare](https://blog.fivenines.com/topic/healthcare) [Strategic Planning](https://blog.fivenines.com/topic/strategic-planning) [Tech Operations Insights](https://blog.fivenines.com/topic/tech-operations-insights) [Clinical IT](https://blog.fivenines.com/topic/clinical-it) [Read More](https://blog.fivenines.com/what-minimum-necessary-actually-means-in-modern-clinical-workflow-and-where-execs-lose-visibility) [![Risk Analysis vs Risk Assessment vs Risk Management: The Framing Every Healthcare Exec Needs](https://blog.fivenines.com/hs-fs/hubfs/blog/taya-migration/94-risk-analysis-vs-assessment-vs-management-ceo.docx.png?width=960&height=540&name=94-risk-analysis-vs-assessment-vs-management-ceo.docx.png)](https://blog.fivenines.com/risk-analysis-vs-risk-assessment-vs-risk-management-the-framing-every-healthcare-exec-needs) #### [Risk Analysis vs Risk Assessment vs Risk Management: The Framing Every Healthcare Exec Needs](https://blog.fivenines.com/risk-analysis-vs-risk-assessment-vs-risk-management-the-framing-every-healthcare-exec-needs) Why Risk Analysis, Risk Assessment, and Risk Management Are Not Interchangeable A healthcare CEO walking into the next executive review is rarely asked to distinguish between Risk... [Healthcare](https://blog.fivenines.com/topic/healthcare) [Strategic Planning](https://blog.fivenines.com/topic/strategic-planning) [Tech Operations Insights](https://blog.fivenines.com/topic/tech-operations-insights) [Clinical IT](https://blog.fivenines.com/topic/clinical-it) [Read More](https://blog.fivenines.com/risk-analysis-vs-risk-assessment-vs-risk-management-the-framing-every-healthcare-exec-needs) [![](https://blog.fivenines.com/hs-fs/hubfs/Blog%20banner%20Who%20Covers%20the%20Other%20128%20Hours@1x.png?width=1200&height=628&name=Blog%20banner%20Who%20Covers%20the%20Other%20128%20Hours@1x.png)](https://blog.fivenines.com/internal-it-or-managed-it-which-is-right-for-your-company) #### [Internal IT or Managed IT: Which Is Right for Your Company?](https://blog.fivenines.com/internal-it-or-managed-it-which-is-right-for-your-company) Internal IT is the right choice when your company needs someone on site every day who knows your people, your equipment, and your quirks. Managed IT is the right choice when you... [IT Services](https://blog.fivenines.com/topic/it-services) [Cybersecurity](https://blog.fivenines.com/topic/cybersecurity) [Strategic Planning](https://blog.fivenines.com/topic/strategic-planning) [Compliance](https://blog.fivenines.com/topic/compliance) [Read More](https://blog.fivenines.com/internal-it-or-managed-it-which-is-right-for-your-company) [![](https://blog.fivenines.com/hs-fs/hubfs/Blog%20banner%20Who%20Gets%20Paged%20at%202%20A.M@1x%20(1).png?width=1200&height=628&name=Blog%20banner%20Who%20Gets%20Paged%20at%202%20A.M@1x%20(1).png)](https://blog.fivenines.com/which-co-managed-it-services-best-support-overworked-internal-it-teams) #### [Which Co-Managed IT Services Support Overworked Internal IT Teams?](https://blog.fivenines.com/which-co-managed-it-services-best-support-overworked-internal-it-teams) The co-managed IT services that best support an overworked internal IT team take over the work that never stops or needs rare skills: 24x7 security monitoring, patch management,... [IT Services](https://blog.fivenines.com/topic/it-services) [Cybersecurity](https://blog.fivenines.com/topic/cybersecurity) [Strategic Planning](https://blog.fivenines.com/topic/strategic-planning) [Read More](https://blog.fivenines.com/which-co-managed-it-services-best-support-overworked-internal-it-teams) [![What Good Looks Like: A Vendor Risk Management Program for Healthcare Under HIPAA (The CFO Governance View)](https://blog.fivenines.com/hs-fs/hubfs/blog/taya-migration/87-good-vendor-risk-healthcare-cfo.docx.png?width=960&height=540&name=87-good-vendor-risk-healthcare-cfo.docx.png)](https://blog.fivenines.com/what-good-looks-like-a-vendor-risk-management-program-for-healthcare-under-hipaa-the-cfo-governance-view) #### [What Good Looks Like: A Vendor Risk Management Program for Healthcare Under HIPAA (The CFO Governance View)](https://blog.fivenines.com/what-good-looks-like-a-vendor-risk-management-program-for-healthcare-under-hipaa-the-cfo-governance-view) The Five Functions a Defensible Healthcare Vendor Risk Program Must Operate Tiering and inventory of all vendors handling ePHI. Due diligence proportional to vendor criticality.... [Healthcare](https://blog.fivenines.com/topic/healthcare) [Strategic Planning](https://blog.fivenines.com/topic/strategic-planning) [Compliance](https://blog.fivenines.com/topic/compliance) [Tech Operations Insights](https://blog.fivenines.com/topic/tech-operations-insights) [Read More](https://blog.fivenines.com/what-good-looks-like-a-vendor-risk-management-program-for-healthcare-under-hipaa-the-cfo-governance-view) [![What a Vendor BAA Actually Obligates the Vendor To, and What It Does Not: The CEO Accountability View](https://blog.fivenines.com/hs-fs/hubfs/blog/taya-migration/92-vendor-baa-obligations-ceo.docx.png?width=960&height=540&name=92-vendor-baa-obligations-ceo.docx.png)](https://blog.fivenines.com/what-a-vendor-baa-actually-obligates-the-vendor-to-and-what-it-does-not-the-ceo-accountability-view) #### [What a Vendor BAA Actually Obligates the Vendor To, and What It Does Not: The CEO Accountability View](https://blog.fivenines.com/what-a-vendor-baa-actually-obligates-the-vendor-to-and-what-it-does-not-the-ceo-accountability-view) Where the Vendor's BAA Obligations End and the CEO's Program Begins A healthcare CEO whose organization runs on cloud, software-as-a-service, or any third-party platform handling... [IT Services](https://blog.fivenines.com/topic/it-services) [Business Continuity](https://blog.fivenines.com/topic/business-continuity) [Strategic Planning](https://blog.fivenines.com/topic/strategic-planning) [Tech Operations Insights](https://blog.fivenines.com/topic/tech-operations-insights) [Read More](https://blog.fivenines.com/what-a-vendor-baa-actually-obligates-the-vendor-to-and-what-it-does-not-the-ceo-accountability-view) [![The HIPAA Security Rule Is Changing for the First Time in Over a Decade: What a Healthcare CEO Needs to Know and Do Now](https://blog.fivenines.com/hs-fs/hubfs/blog/taya-migration/91-hipaa-security-rule-update-ceo.docx.png?width=960&height=540&name=91-hipaa-security-rule-update-ceo.docx.png)](https://blog.fivenines.com/the-hipaa-security-rule-is-changing-for-the-first-time-in-over-a-decade-what-a-healthcare-ceo-needs-to-know-and-do-now) #### [The HIPAA Security Rule Is Changing: What a Healthcare CEO Needs](https://blog.fivenines.com/the-hipaa-security-rule-is-changing-for-the-first-time-in-over-a-decade-what-a-healthcare-ceo-needs-to-know-and-do-now) Why the HIPAA Security Rule Is Being Revised — And What Changed Since 2013 The HIPAA Security Rule's last meaningful update came through the Omnibus Rule in 2013. In 2013, the... [Healthcare](https://blog.fivenines.com/topic/healthcare) [Strategic Planning](https://blog.fivenines.com/topic/strategic-planning) [Tech Operations Insights](https://blog.fivenines.com/topic/tech-operations-insights) [Clinical IT](https://blog.fivenines.com/topic/clinical-it) [Read More](https://blog.fivenines.com/the-hipaa-security-rule-is-changing-for-the-first-time-in-over-a-decade-what-a-healthcare-ceo-needs-to-know-and-do-now) [1](https://blog.fivenines.com/topic/strategic-planning/page/1) [2](https://blog.fivenines.com/topic/strategic-planning/page/2) [3](https://blog.fivenines.com/topic/strategic-planning/page/3) [4](https://blog.fivenines.com/topic/strategic-planning/page/4) [5](https://blog.fivenines.com/topic/strategic-planning/page/5) [Next](https://blog.fivenines.com/topic/strategic-planning/page/2) ### Topics [Cybersecurity](https://blog.fivenines.com/topic/cybersecurity) [Outsourced IT](https://blog.fivenines.com/topic/outsourced-it) [IT Tips & Tricks](https://blog.fivenines.com/topic/it-tips-tricks) [Business Continuity](https://blog.fivenines.com/topic/business-continuity) [Strategic Planning](https://blog.fivenines.com/topic/strategic-planning) --- ![email icon](https://blog.fivenines.com/hs-fs/hubfs/email%20icon.png?width=70&height=57&name=email%20icon.png) ### Stay Informed Subscribe to our newsletter to get fresh insights delivered to your inbox. ## Let's get in touch   [**(402) 817-2630**](tel:402-817-2630) [help@fivenines.com](mailto:help@fivenines.com) [Lincoln, NE](https://fivenines.com/contact/lincoln) [Omaha, NE](https://fivenines.com/contact/omaha) [Kearney, NE](https://fivenines.com/contact/kearney) [Central City, NE](https://fivenines.com/contact/central-city) [St. Louis, MO](https://fivenines.com/st-louis) ![cyberverify-1](https://blog.fivenines.com/hs-fs/hubfs/cyberverify-1.png?width=110&height=110&name=cyberverify-1.png)![aicpa](https://blog.fivenines.com/hs-fs/hubfs/aicpa.png?width=110&height=110&name=aicpa.png) ### Are we a good fit? [![Schedule Consultation](https://no-cache.hubspot.com/cta/default/1857420/interactive-196258273705.png)](https://blog.fivenines.com/hs/cta/wi/redirect?encryptedPayload=AVxigLJTowhkappAdMrQ1J7uAnNlYMvZeHY21Uz0nGBtWBsqwDuSwPJLlDNpGrIOkmwuOr31JEa892lEubPuNbbz8CRwaD%2FaUZNJIFMquJxu0Z8IbcPC%2FXT%2FzU5GI6Yz6%2B8jaLWpcLlqlbmDGVz4z8WcewpaNjFFtZWJRlFFTFthEYH2M%2FYuPYVE3%2BWZZdDI71%2BOMufo2A%3D%3D&webInteractiveContentId=196258273705&portalId=1857420)   - [Privacy Policy](https://fivenines.com/privacy-policy/) - [HTML Sitemap](https://fivenines.com/html-sitemap/) © 2026 Five Nines Technology Group | 5617 Thompson Creek Blvd Lincoln, NE 68516 [Facebook](https://www.facebook.com/gonines)[Linkedin](https://www.linkedin.com/company/five-nines-technology-group/) [Blog](https://blog.gonines.com/?__hstc=143714730.45718742b0726c421d8592d7ea71f58b.1757514685996.1758029308186.1758134756251.4&__hssc=143714730.31.1758134756251&__hsfp=1745665186)   [Client Support](https://fivenines.com/client-login/) Return to top