Dental · 6 min read
The HIPAA Security Risk Assessment: What Every Dental Practice Needs to Know
It is required, it is the first thing investigators ask for, and most practices are overdue. Here is what a useful risk assessment actually covers.
North Bay IT & security · Since 2009
Secure IT for the people trusted with sensitive information.
Dental practices, law firms, and nonprofits hold patient records, privileged files, and donor data. M&R Systems keeps those systems running — and keeps them aligned with HIPAA and California law.
Safeguard check
Monitored- HIPAA risk analysis45 CFR 164.308Documented
- Client confidentialityB&P Code 6068(e)Protected
- Breach exposureCiv. Code 1798.82Encrypted
- Off-site backupsRestore testVerified
Who we serve
Three industries. Three very different sets of rules.
Generic IT support treats every office the same. We specialize in organizations where a security mistake is also a compliance problem — and we tailor everything to how your work actually gets done.
Dental, Orthodontic & Oral Surgery Practices
Imaging, practice management software, HIPAA safeguards, and backups that actually restore — for general, ortho, and surgical practices.
- HIPAA
- BAA
- CMIA
Law Firms & Legal Practices
Confidential client data, secure remote work, and wire-fraud defenses built around California attorney duties.
- B&P 6068(e)
- Rule 1.1
- Rule 1.6
Nonprofits & Community Organizations
Donor data protection, volunteer onboarding, and nonprofit technology programs — on a budget your board will approve.
- Civ. Code 1798.81.5
- Civ. Code 1798.82
- PCI DSS
How we work
Compliance-aware IT, without the jargon.
- Family-owned
- Locally operated since 2009
- North Bay based
- On-site across Marin, Sonoma & the greater North Bay
- Security-first
- We sign BAAs with healthcare clients
- Step 1
Assess
We inventory your devices, accounts, and where sensitive data lives, then map gaps against HIPAA, State Bar guidance, and California privacy law.
- Step 2
Secure
We fix the highest-risk issues first — multi-factor sign-in, encryption, isolated backups, email protection — and document every safeguard.
- Step 3
Support
Ongoing monitoring, patching, and a local help desk that knows your office by name. Quarterly reviews keep your plan current.
Free AI site scan
See how secure, accessible, and HIPAA-safe your website is.
Our agent checks security headers, ADA/WCAG issues, ad pixels on appointment and intake pages, and California privacy requirements. You get a graded report in about a minute.
Insights
Practical security guidance for your industry
Straightforward articles on HIPAA, attorney confidentiality, donor privacy, and keeping your systems running.
Law Firms · 6 min read
California Attorneys' Duty of Confidentiality in the Age of Cyberattacks
Business & Professions Code § 6068(e), Rule 1.6, and the technology-competence comment to Rule 1.1 — and what they mean for your firm’s IT.
Nonprofits · 5 min read
Protecting Donor Data: A Guide for California Nonprofits
Donors trust you with their names, addresses, and payment details. California law expects you to protect them.
Free assessment · No pressure
Find out where your IT stands — free.
Tell us a little about your organization. A local M&R Systems technician will review your systems and security and send you a prioritized, plain-English plan.
- Local, family-owned team
- Plain-English report
- No cost, no obligation
Rather call?(415) 497-4137