Patient information wanders. Exported for a meeting, attached to a message, dropped into a scan folder, left on a machine that has changed hands twice since. This station locates it, counts it, and only then decides what may happen to it. That order matters, because a rule written over a surface nobody measured is decoration.
The first line sweeps machines and shares looking for health identifiers and card data, and hands back a breakdown machine by machine. Most practices find the first sweep uncomfortable and useful in roughly equal measure, because it converts a difference of opinion about how exposed the clinic is into a list with figures beside each entry.
Figures give the clean-up an order. A reception PC carrying nine thousand rows nobody remembers exporting comes before a laptop holding twelve. Without them, remediation happens in whatever sequence somebody thought of, and the biggest pile is reliably the one left until last.
The second line encrypts what matters and governs the routes it can travel: removable media, cloud upload, mail. A copy that leaves the machine leaves unreadable. Nothing about the way anybody works has to change.
In a clinical setting the policy has to be negotiated rather than announced. A rule that blocks a genuine referral will be worked around inside a week, and then you have taught the practice to operate outside the control. Spending a further fortnight naming the exceptions is cheaper than that lesson.
Rates come live from billing. Anything tagged waits on the chart while you carry on reading.
A sweep over machines and shares looking for health identifiers and card data, giving back a figure for what each is carrying. Governing a folder nobody located is impossible, and a guess gives a risk analysis nothing to quote.
| Fitted to | Windows endpoints and the file shares a practice genuinely uses |
|---|---|
| Watches | Which folders hold sensitive records, of what sort, and how many |
| Kept for | A dated record, machine by machine, of what the sweep turned up |
| Escalates to | A clean-up list ranked by exposure instead of by hunch |
| Reviewed by | Your privacy officer, with our engineers on the findings |
Sensitive files get encrypted and the routes they may travel get governed, so a copy leaving the machine leaves unreadable. It follows the sweep, since a rule imposed on ground nobody measured is theatre.
| Fitted to | Devices already carrying discovery, where the surface is known |
|---|---|
| Watches | Sensitive files, and every route somebody moves them down |
| Kept for | A history of enforcement, producible whenever asked |
| Escalates to | A stop at the machine, plus a note landing on our desk |
| Reviewed by | An engineer, whenever a clinical workflow needs an exception |
Each station has an edge to it, and clinics get caught out by suppliers who pretend otherwise. Below is where this one stops, set down so a practice can work out what else it needs and who else has to supply it.
Heads up: card statements show FORTIFY 24X7 - MediDefense IT is a Fortify 24x7 brand, and your subscription is billed by Fortify 24x7.