Keepwell

Guides from Keepwell

IT that keeps care running.

HIPAA IT checklist for remote-first care teams

HIPAA's Security Rule expects a remote-first care company to control access to client data, manage and encrypt every laptop and phone, protect email and backups, sign BAAs with ...

MFA and encryption for small health companies

HIPAA's current Security Rule requires reasonable access controls and is generally interpreted to call for strong authentication. The proposed update would make MFA and encrypti...

Google Workspace vs Microsoft 365 for HIPAA

Either suite can work for a HIPAA-covered company. What decides it is a signed business associate agreement, a plan that includes MFA, device management and data loss prevention...

Common IT terms, in plain words

Multi-factor authentication (MFA)
A sign-in that asks for a second proof, such as an authenticator app code or a security key, on top of a password.
Single sign-on (SSO)
One company login for many apps, so IT can enforce MFA in one place and remove access fast when someone leaves.
Mobile device management (MDM)
Software that lets IT enforce encryption, updates, screen lock and remote wipe on company laptops and phones.
Zero-touch laptop setup
A new laptop ships straight to the person's home and sets itself up with company apps and settings at first sign-in.
Endpoint detection and response (EDR)
Security software on each device that watches for threats and lets responders isolate a device quickly.
Offboarding
Removing a departing person's access, recovering or wiping their devices, and handing their files and clients to someone else.