Most security incidents at small organizations do not start with a sophisticated hack. They start with a reused password, a phishing email that looked like a fax notification, an unpatched computer at a nurse station, or a backup nobody had tested. Our cybersecurity work focuses on closing those everyday gaps first, then building monitoring and response on top of them.
We work with clinics, nursing homes, assisted living communities and small businesses that handle sensitive information but do not have a security team of their own. If you store protected health information (PHI), we approach the work with the HIPAA Security Rule in mind and will sign a Business Associate Agreement (BAA).
Healthcare and senior living organizations with PHI spread across an EHR, email, scanned documents and shared drives. Small businesses whose cyber-insurance application asks questions they are not sure how to answer. Offices that have been running on a consumer router and free antivirus and know it is time to grow up.
We start with an assessment and give you a plain-English list of findings, ranked by risk and effort. Quick wins such as MFA and removing old accounts usually come first because they block the most common attacks. Larger projects, like replacing an end-of-life firewall or segmenting the network, are scheduled around your operations so a care facility is never left without access to its systems during a shift.
After the initial work, security becomes part of ongoing management: monthly patch and alert reviews, user changes when staff join or leave, and an annual look at what has changed.
Cybersecurity is usually included in a flat monthly managed IT agreement based on your users, devices and sites. One-time projects, such as a firewall replacement or a security assessment on its own, are quoted up front so you know the cost before work begins. See our IT pricing guide for what moves the number up or down.
“UnityCare IT has consistently demonstrated exceptional expertise across a wide range of IT disciplines, including network infrastructure, cybersecurity, security camera installation and support, as well as technical support.” — Tandie Hastings, CEO, Companion Health
Will you sign a Business Associate Agreement?
Yes. If we will have access to systems that store or transmit PHI, we sign a BAA with your organization before that work begins.
Does using your services make us HIPAA compliant?
No vendor can make you compliant on their own. HIPAA compliance also depends on your policies, training and risk analysis. We handle the technical safeguards and help you produce the documentation that shows they are in place.
What is the first thing you would change?
For most small organizations it is turning on multi-factor authentication for email and remote access and removing accounts that belong to people who no longer work there. Those two steps stop a large share of common account-takeover attacks.
Can you help with our cyber-insurance application?
Yes. We can explain what each security question is asking, tell you honestly which controls you have today, and help put missing ones in place before renewal.
What happens if we do get hit?
Call or text us right away. We help contain the problem, restore from backup, preserve the information your insurer and any required breach assessment will need, and walk through what to change so it does not happen again.
Call or text 405-285-3845, or email start@unitycareit.com. A real person answers.