HIPAA security readiness · for independent practices · Greenlawn, NY

we handle your practice’s security, for one fixed fee.

A risk assessment, a phishing drill, or a hardening sprint for clinics and dental offices — each one closing with a ranked list of what to fix and an hour with your staff. You keep seeing patients. We look after the computers holding their charts.

The practices we sit down with
  • independent dental offices
  • family & internal medicine
  • pediatrics
  • physical therapy
  • optometry
Book a readiness call 30 minutes, no charge · or ring (516) 381-0450
Fixed fees
from $1,375
Every engagement ends with
a ranked report + a staff session
Based in
Greenlawn, NY
How an engagement runs

four weeks, planned around your patient schedule

Most small practices come to us after something specific: a vendor asked for a risk analysis, a staff member opened an attachment they shouldn’t have, or the practice manager simply realized nobody had looked at the front-desk computers in years. Whatever brought you here, the path from that first conversation to a team that knows what to watch for is the same, and it is short.

We schedule on-site work before opening, over lunch, or after the last appointment, so the chair stays full. Every step below lists what we do and — just as important — the small part that’s yours. Most weeks, your part is very little.

  1. Day 0 · 30 minutes

    the courtesy call

    We ask about headcount, your EHR or practice-management software, and who you call when the front-desk PC misbehaves. A fixed quote follows in writing within one business day.

    Your part: pick a time that isn’t between patients.

  2. Week 1 · half a day on-site

    the walk-through

    We inventory every workstation, tablet, router, and the imaging PC in the back operatory, then review your policies and business associate agreements.

    Your part: leave a key with whoever opens.

  3. Week 2 · after hours

    the quiet test

    Simulated phishing emails arrive in staff inboxes while hardening work runs once the office is closed. Patient visits carry on undisturbed.

    Your part: nothing at all — that’s the idea.

  4. Week 3 · 45-minute review

    the ranked report

    Every finding, ordered by risk and by cost to fix. The free, fifteen-minute fixes sit at the top so you can clear them by Friday.

    Your part: sit with us while we walk through it.

  5. Week 4 · 60 minutes

    the staff session

    An hour with your whole team, in your break room or over video, built from what we actually found in your office. In person, we bring the coffee.

    Your part: gather the team; we’ll set up.

Answered before you ask

what practice managers ask us first

Is the price really fixed?
Yes. The figure on your quote is the figure on your invoice — even when the walk-through runs long.
Do we need an IT person on staff?
No. Most practices we serve have a vendor they phone, or a front-desk lead who keeps things running. We write the report for that person.
Will this slow down the schedule?
It shouldn’t. On-site work happens before opening, over lunch, or after the last patient leaves.
What if our staff click the test emails?
Then the test did its job. Nobody is named to the doctor; anyone who clicks gets a private, five-minute coaching note.
Does this cover the HIPAA risk analysis?
Our assessment follows the Security Rule’s administrative, physical, and technical safeguards and leaves you a dated, written risk analysis to keep on file.
Engagements & fees

three engagements, each closing with a report and a staff session

Choose the one that answers today’s worry, or take all three over a year. Fees are quoted in writing after the courtesy call and invoiced once the work is delivered.

A consultant kneeling at a dental office reception desk, checking the workstation against a printed checklist.
Engagement 01 · 3–4 weeks

hipaa security risk assessment

$2,850 practices up to 15 staff · $3,640 for 16–40 staff

The one most practices start with. We look at every device, account, and policy that touches patient information and tell you, in order, what to fix first and what it will cost.

  • On-site walk-through, timed around patients
  • Device & account inventory
  • Administrative, physical & technical safeguard review
  • Business associate agreement check
  • Dated risk analysis for your files
  • Ranked remediation report
  • 60-minute staff training session
Reserve an assessment
A staff member in scrubs studying an email on a laptop in a clinic break room.
Engagement 02 · 90 days

phishing simulation campaign

$1,375 per 90-day campaign · whole staff included

Three realistic test emails over a quarter — a fake insurance remittance, a spoofed lab result, a “password expiring” notice — so your team learns to pause before clicking.

  • Three simulated sends, staggered
  • Lures written for healthcare offices
  • Click & report rates by role
  • Private coaching notes for clickers
  • Ranked follow-up report
  • 60-minute staff training session
Schedule a phishing campaign
Hands inserting a security key into an exam-room workstation keyboard.
Engagement 03 · 2 evenings

endpoint hardening sprint

$1,960 up to 12 devices · $85 each additional

We tighten the machines themselves after hours — encryption, sign-in, updates, backups — so a lost laptop or a guessed password stops being an emergency.

  • Full-disk encryption on every device
  • Multi-factor sign-in for email & EHR
  • Patching & auto-update setup
  • Shared and local-admin logins retired
  • Screen-lock timers for open areas
  • Backup restore test
  • 60-minute staff training session
Book a hardening sprint

Planning the whole year? Book all three engagements within twelve months and the set is $5,690 rather than $6,185. We’ll space them so each report builds on the last.

Ask about the full year
Our approach

what you’re left holding once we leave

You work in charts all day, so we write our findings like one. Here’s the difference between a binder that sits on a shelf and a note you can act on Monday morning.

The usual audit

a binder for the shelf

  • Billed by the hour, so every follow-up question carries a cost
  • A thick PDF of findings sorted by control number, not by urgency
  • Written for an auditor; your office manager needs a glossary to read it
  • Staff hear about it in a memo, if they hear at all
  • Phishing tests that name the people who clicked
A Zelvio report

a chart note you can act on

S
What your team tells usThe shared login at the front desk, the password on the sticky note, the tablet nobody remembers buying.
O
What we find on the machinesUnencrypted drives, an unpatched imaging PC, guest Wi-Fi on the same network as the EHR.
A
The risk, rankedHigh to low, each with a plain-English line on why it matters to a practice your size.
P
The planWho fixes what, by when, and what it costs — then we teach your staff the part that’s theirs.
Book a call

the short version, in numbers we keep

Tell us how many people work in the office and what software runs the schedule. We’ll take it from there.

Book your 30-minute call or ring (516) 381-0450

0min

for the first call — and there’s no charge for it

0day

of business to receive your fixed quote, in writing

0wks

typically, from walk-through to staff session

0min

of staff training, included with every engagement

a word before you visit

“Your patients trust you with their charts. Our part is making sure the computers holding them have earned that trust too.”

— The opening line of every Zelvio engagement letter
6 Blvd Ave, Greenlawn, NY 11740

Meetings at our office are by appointment; the walk-through itself happens at your practice.

Plot the route to Blvd Ave
Contact

reach us whichever way suits your day

Call (516) 381-0450 If we’re with a client, we return calls the same day. Ring us
Write contact@zelvioagency.com Send your headcount and software; we’ll reply with questions or a quote. Write to us
Visit 6 Blvd Ave, Greenlawn, NY 11740 By appointment, so the kettle’s on when you arrive. Open in maps
Hours By appointment — book a call On-site work is booked around your patient hours, early or late. Pick a time
Request your courtesy call

tell us a little; we’ll prepare the rest

A good time to call helps too — we’ll work around your schedule.

Ready when you are

the first call is thirty minutes, and it’s on us.

Share your headcount and your software. A fixed quote arrives in writing within one business day, and the walk-through is booked around your patients.

Book the courtesy call or ring (516) 381-0450