Tools reviewed before they go live.
AI, vendor terms, data flows, and business-associate questions examined together.
Technology + security leadership for healthcare
Security leadership that lives inside the work.
A risk analysis on a shelf is not leadership. I help clinics, practices, behavioral health organizations, and healthcare nonprofits manage the decisions that keep changing underneath it.
Ongoing oversight for vendors, AI tools, business associates, security governance, and executive reporting—without pretending one person or one assessment magically “makes you compliant.”
Tell me about itWhere the risk lives
The environment changes after the assessment is signed.
A scribe vendor changes its terms. An integration starts moving data nobody mapped. A business associate adds a subprocesser. Staff find an AI tool on Tuesday.
01AI scribes and other clinical tools need review before data moves.
02Vendor agreements and BAAs need to match what the service actually does now.
03Risk analysis needs an operating owner and a living action list.
04Executives and boards need clear reporting without false guarantees.
What changes
Responsibility gets a name, a cadence, and current context.
Work that stays current.
Assessment findings, registers, decisions, and reporting maintained as the environment changes.
A first call when it matters.
Executive coordination with your MSP, counsel, carrier, or incident-response firm.
What I handle
The operating decisions behind security governance.
- Security governance. Clear ownership, practical policies, and an accountable operating cadence.
- Risk analysis and follow-through. Findings translated into priorities and decisions leadership can fund.
- Vendor and business-associate oversight. Terms, BAAs, services, and data handling examined together.
- AI governance. Clinical and administrative tools reviewed in context before adoption.
- Board and executive reporting. Plain-English status, gaps, decisions, and next steps.
Assessment first
Then keep it true.
Start with a clear current state and action plan. Continue with the leadership required to keep vendors, systems, AI use, and risk decisions current.
See how the relationship starts →Tell me what landed on your desk
You need security leadership—not a compliance promise nobody can honestly make.
Free. If you don’t need me monthly, I’ll say so.