SY

Mission control

Meridian Health Group — 9 items

Deploy CrowdStrike to all clinic workstations

Audit shows 23 of 38 clinic workstations missing EDR coverage. PHI exposure risk. Contact CrowdStrike for additional seat licenses and schedule deployment over the next maintenance window.

Implement clinical database backup strategy

No automated backup exists for clinical databases. Set up Cloud SQL automated snapshots (daily, 30-day retention) and test a full restore procedure. Document the recovery steps.

Set up Google Workspace backup solution

Google Vault is archival, not backup. Evaluate Backupify or SpinBackup for full Workspace backup including Drive, Gmail, and Shared Drives. HIPAA BAA required from vendor.

Create incident response plan

No documented IR plan exists. Required for HIPAA and SOC 2. Define roles, communication tree, containment procedures, and reporting requirements (72-hour breach notification for HIPAA).

Conduct full asset inventory

No centralized asset tracking. Survey all 4 locations for hardware (workstations, network gear, printers, medical devices). Evaluate Snipe-IT (free, self-hosted) for tracking.

Begin SOC 2 readiness assessment

Partners requesting SOC 2 Type II. Start with a gap assessment against TSC criteria. Synthos framework covers many of these — close the security and documentation gaps first.

Roll out company-wide password manager

MFA is active but no centralized credential management. Evaluate 1Password Business or Bitwarden (self-hosted option). Critical for HIPAA access control requirements.

Review 8 unused Google Workspace licenses

License audit shows 8 seats assigned to former employees or unused accounts. Reclaiming saves ~$1,344/year on Business Plus plan.

Present HIPAA compliance progress to leadership

You've completed BAA, MFA, email security, and security training. Package these wins into a 1-page summary for your next leadership meeting — shows IT value and justifies upcoming budget requests.

These priorities were generated from a 5-minute conversation.

Imagine what Synthos finds when it knows your actual environment.