Clinics · law · accounting · professional offices

The office manager should not also be the IT department.

Dental, medical, legal, and accounting practices in the Tri-Cities and Western North Carolina run on Microsoft 365, an imaging or practice-management box, and a closet nobody wants to open. We keep that stack boring — and we show up when it is not.

Avery Parker · principal Support since the early 1990s Networks & security since the late 1990s Linux since ~2000 Johnson City office · you talk to the same person

Talk about the practice See packages

What these offices actually buy

Microsoft 365 tenant that is not a pile of personal Hotmail forwards
Backups that restore the imaging PC and the QuickBooks file, not only a green checkmark
A firewall and wireless that separate guest Wi-Fi from the front desk
A named person when ransomware or a bad email hits — incident response
Drives that leave the building with a signed certificate, not a Best Buy bag
A written continuity plan when the insurer or the attorney asks — vCISO / BCP

We work under a business associate agreement when the work touches ePHI. We do not sell you a “HIPAA in a box” stack we are paid to push. There is no official HIPAA certification for an MSP; anyone who sells you one is selling a logo.

A week in a typical practice

Monday is the imaging PC that will not talk to the sensor. Wednesday is the new hire who needs 365 without inheriting the last associate’s mailbox. Friday is the insurer asking whether you have a continuity plan. None of that should wait on a national queue that does not know State of Franklin from West Market.

Remote first: identity, backups, the vendor pile. Onsite when the closet, the wireless, or the owner who will not put the server on the internet is the actual problem. If you want a monthly security program rather than break-fix, that is fractional CISO / CIO next to the helpdesk — not instead of it.

We work with the IT you already have

If you have an admin, a helpdesk, or an out-of-town MSP, we do not replace them. We sit next to that person: vendors, budget, security program, surge, and someone who can be in the building. Tickets and day-to-day ownership stay where they are unless you ask otherwise.

Small enough

A solo attorney or a three-chair dental office is a first-class client. Remote first; onsite in Johnson City, Kingsport, Bristol, Greeneville, Elizabethton, Erwin, Asheville, Weaverville, and Mars Hill.

Regulated enough

HIPAA, GLBA, and ABA continuity language live on the vCISO page. Destruction methods follow NIST SP 800-88. We will say when you need counsel, not a new firewall.

Questions we get

Are you a HIPAA “certified” vendor?

There is no official HIPAA certification for an MSP. We work under a BAA when the engagement requires it, design 365 and backups so ePHI is not sitting in the wrong place, and issue a signed destruction certificate when drives leave the building.

We are a five-provider clinic. Are we too small?

No. Most of this work is remote: identity, backups, and the vendor pile. We drive to Johnson City, Kingsport, Bristol, Greeneville, Elizabethton, Erwin, Asheville, Weaverville, or Mars Hill when the closet or the imaging PC will not wait.

Can you sit next to the office manager instead of replacing her?

Yes. She keeps the vendors and the day-to-day. We are the named engineer for the stack, the incident, and the questions an insurer or attorney will ask.

Do you write policies?

vCISO retainers include policy review and a continuity plan with HIPAA / GLBA / ABA language where it applies. We do not pretend to be your counsel.

Tell us how the practice actually runs.

We will say whether you need a package, a one-off, or a lawyer.

Request a call Call 423-888-0252